{"action":"Upgrade pterodactyl/panel to 1.6.3 or later.","affected":[{"fixed":"1.6.3","introduced":"1.0.0"}],"component":"pterodactyl/panel","cve_ids":["CVE-2021-41176"],"ecosystem":"Packagist","epss":0.0052,"exploited":false,"fixed_versions":["1.6.3"],"ghsa_id":"GHSA-m49f-hcxp-6hm6","id":"tcs_01M5KF5427MVCEV91M1HQF1QMR","modified_at":"2026-07-08T06:27:50.596374679Z","published_at":"2021-10-25T19:42:46Z","references":["https://osv.dev/vulnerability/GHSA-m49f-hcxp-6hm6","https://github.com/pterodactyl/panel/security/advisories/GHSA-m49f-hcxp-6hm6","https://nvd.nist.gov/vuln/detail/CVE-2021-41176","https://github.com/pterodactyl/panel/commit/45999ba4ee1b2dcb12b4a2fa2cedfb6b5d66fac2","https://github.com/pterodactyl/panel","https://github.com/pterodactyl/panel/releases/tag/v1.6.3"],"severity":{"label":"unknown","score":0},"sources":[{"source":"osv","source_id":"GHSA-m49f-hcxp-6hm6","url":"https://osv.dev/vulnerability/GHSA-m49f-hcxp-6hm6"}],"summary":"pterodactyl/panel CSRF allowing an external page to trigger a user logout event"}