Go/github.com/1Panel-dev/1Panel/core CVE-2025-66507: high 7.5, EPSS 0.47%

1Panel – CAPTCHA Bypass via Client-Controlled Flag

Action: Upgrade github.com/1Panel-dev/1Panel/core to 0.0.0-20251128030527-ac43f00273be or later.

go get github.com/1Panel-dev/1Panel/core@v0.0.0-20251128030527-ac43f00273be

Affected

Fixed versions

Sources

• osv: GHSA-qmg5-v42x-qqhq#Go/github.com/1Panel-dev/1Panel/core
• https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-qmg5-v42x-qqhq
• https://nvd.nist.gov/vuln/detail/CVE-2025-66507
• https://github.com/1Panel-dev/1Panel/commit/ac43f00273be745f8d04b90b6e2b9c1a40ef7bca
• https://github.com/1Panel-dev/1Panel
• https://github.com/1Panel-dev/1Panel/releases/tag/v2.0.14

CVE-2025-66507 · published 2025-12-08T17:56:27Z · modified 2025-12-15T19:56:03.279253Z · JSON