github.com/pterodactyl/wings
Go8 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/pterodactyl/wingspage 1 of 1
- CVE-2021-32699MEDIUMCVSS 6.5EG 6.5✓ Fixed in 1.4.42021-06-22
Wings is the control plane software for the open source Pterodactyl game management system. All versions of Pterodactyl Wings prior to `1.4.4` are vulnerable to system resource exhaustion due to improper container process limits being defi…
- CVE-2023-25152HIGHCVSS 8.4EG 8.4✓ Fixed in 1.11.32023-02-08
Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to create new files and directory structures on the host system that previously did not exist, potentially allowing attackers t…
- CVE-2023-25168CRITICALCVSS 9.6EG 9.6✓ Fixed in 1.11.42023-02-09
Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system. This vulnerability can be combined with `GHSA-p8r3-83r8-jwj5` to overwrite files on the host syste…
- CVE-2023-32080CRITICALCVSS 9.0EG 9.0✓ Fixed in 1.11.62023-05-10
Wings is the server control plane for Pterodactyl Panel. A vulnerability affecting versions prior to 1.7.5 and versions 1.11.0 prior to 1.11.6 impacts anyone running the affected versions of Wings. This vulnerability can be used to gain a…
- CVE-2024-27102CRITICALCVSS 9.9EG 9.9✓ Fixed in 1.11.92024-03-13
Wings is the server control plane for Pterodactyl Panel. This vulnerability impacts anyone running the affected versions of Wings. The vulnerability can potentially be used to access files and directories on the host system. The full scope…
- CVE-2024-34066HIGHCVSS 8.4EG 8.4✓ Fixed in 1.11.122024-05-03
Pterodactyl wings is the server control plane for Pterodactyl Panel. If the Wings token is leaked either by viewing the node configuration or posting it accidentally somewhere, an attacker can use it to gain arbitrary file write and read a…
- CVE-2024-34068MEDIUMCVSS 6.4EG 6.4✓ Fixed in 1.11.122024-05-03
Pterodactyl wings is the server control plane for Pterodactyl Panel. An authenticated user who has access to a game server is able to bypass the previously implemented access control (GHSA-6rg3-8h8x-5xfv) that prevents accessing internal e…
- CVE-2025-68954MEDIUMCVSS 5.4EG 5.4✓ Fixed in 1.12.02026-01-06
Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below do not revoke active SFTP connections when a user is removed from a server instance or has their permissions changes with respect to file access ov…
Check whether github.com/pterodactyl/wings is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/pterodactyl/wings CVEs against the assets you own.
Start Free Scan →