Go/github.com/donknap/dpanel CVE-2025-66292: unknown, EPSS 0.65%
DPanel has an arbitrary file deletion vulnerability in /api/common/attach/delete interface in github.com/donknap/dpanel
Action: Upgrade github.com/donknap/dpanel to 1.9.2 or later.
go get github.com/donknap/dpanel@v1.9.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.2 | - |
Fixed versions
| 1.9.2 |
Sources
- osv: GO-2026-4318
- https://github.com/donknap/dpanel/security/advisories/GHSA-vh2x-fw87-4fxq
- https://nvd.nist.gov/vuln/detail/CVE-2025-66292
- https://github.com/donknap/dpanel/commit/cbda0d90204e8212f2010774345c952e42069119
- https://github.com/donknap/dpanel/releases/tag/v1.9.2
CVE-2025-66292 · published · modified · JSON