Packagist/pterodactyl/panel CVE-2026-35202: low 2.3, EPSS 0.21%
Pterodactyl has a database resource limit bypass via race condition in Client API
Action: Upgrade pterodactyl/panel to 1.12.3 or later.
composer require pterodactyl/panel:1.12.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.3 | - |
Fixed versions
| 1.12.3 |
Sources
- osv: GHSA-fgmm-w5cx-vrfw
- nvd: CVE-2026-35202
- https://github.com/pterodactyl/panel/security/advisories/GHSA-fgmm-w5cx-vrfw
- https://github.com/pterodactyl/panel
CVE-2026-35202 · published · modified · JSON