{"action":"Upgrade pterodactyl/panel to 1.12.0 or later.","affected":[{"fixed":"1.12.0","introduced":"0"}],"component":"pterodactyl/panel","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.12.0"],"ghsa_id":"GHSA-mgr9-6c2j-jxrq","id":"tcs_01M5KF5J7B7RETSZ6SYMV570ZN","modified_at":"2025-12-30T15:37:59.047107Z","published_at":"2025-12-30T15:13:52Z","references":["https://osv.dev/vulnerability/GHSA-mgr9-6c2j-jxrq","https://github.com/pterodactyl/panel/security/advisories/GHSA-mgr9-6c2j-jxrq","https://github.com/pterodactyl/panel/commit/1570ff250939b75b3ba8cd03e5025d8293544ed4","https://github.com/pterodactyl/panel"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-mgr9-6c2j-jxrq","url":"https://osv.dev/vulnerability/GHSA-mgr9-6c2j-jxrq"}],"summary":"Pterodactyl has a Reflected XSS vulnerability in “Create New Database Host”"}