---
id: CVE-2021-32699
aliases:
  - GHSA-jj6m-r8jc-2gp7
  - GO-2022-0919
title: >-
  Asymmetric Resource Consumption (Amplification) in Docker containers created
  by Wings 
summary: >-
  Asymmetric Resource Consumption (Amplification) in Docker containers created
  by Wings 
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H'
vendor: pterodactyl
product: github.com/pterodactyl/wings
ecosystem: go
affected:
  - github.com/pterodactyl/wings < 1.4.4
patched:
  - github.com/pterodactyl/wings 1.4.4
published: '2021-06-23'
updated: '2026-07-08'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-jj6m-r8jc-2gp7'
references:
  - url: >-
      https://github.com/pterodactyl/wings/security/advisories/GHSA-jj6m-r8jc-2gp7
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2021-32699'
  - url: >-
      https://github.com/pterodactyl/wings/commit/e0078eee0a71d61573a94c75e6efcad069d78de3
  - url: 'https://github.com/pterodactyl/wings'
tags:
  - osv
  - go
epss: 0.00267
epssPercentile: 0.16741
ingestedAt: '2026-07-09T18:56:36.579Z'
---

## Overview

### Impact
All versions of Pterodactyl Wings preior to `1.4.4` are vulnerable to system resource exhaustion due to improper container process limits being defined. A malicious user can consume more resources than intended and cause downstream impacts to other clients on the same hardware, eventually causing the physical server to stop responding.

### Patches
Users should upgrade to `1.4.4`.

### Workarounds
There is no non-code based workaround for impacted versions of the software. Users running customized versions of this software can manually set a PID limit for containers created.

### For more information
If you have any questions or comments about this advisory:
* Contact us on [Discord](https://discord.gg/pterodactyl)
* Email us at `dane ät pterodactyl dot io`

## Affected packages

- `github.com/pterodactyl/wings < 1.4.4`

## Remediation

Upgrade to a patched release:

- `github.com/pterodactyl/wings 1.4.4`