VulnSea

github.com/pterodactyl/wings vulnerabilities

CVEs whose affected-version data names the github.com/pterodactyl/wings package (composer, go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

6 CVEsRSS

CVE-2026-52857Medium· 5.5
1mo ago

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, and xml configuration-file parsers in parser.go can process an oversized non-file parser configur…

▾ Sunlitpterodactyl · github.com/pterodactyl/wingsEPSS 0.11%via NVD
CVE-2026-52855Critical· 9.9
1mo ago

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{config.}} placeholders in egg configuration-file templates allow a low-privileged user to read {{config.token}}, {{co…

▾ Midnightpterodactyl · github.com/pterodactyl/wingsEPSS 0.29%via NVD
CVE-2026-52856High· 7.5
1mo ago

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0.

▾ Twilightpterodactyl · github.com/pterodactyl/wingsEPSS 0.34%via NVD
CVE-2026-54593High· 8.1
1mo ago

Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions

Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions

▾ Twilightpterodactyl · pterodactyl/panelEPSS 0.36%via GHSA
GHSA-rhq6-9rgh-v45cMedium· 5.0
2mo ago

Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container

Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container

▾ Sunlitpterodactyl · github.com/pterodactyl/wingsvia GHSA
CVE-2021-32699Medium· 6.5
5y ago

Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

▾ Sunlitpterodactyl · github.com/pterodactyl/wingsEPSS 0.27%via OSV
github.com/pterodactyl/wings vulnerabilities (CVEs) · VulnSea