{"action":"Upgrade github.com/pterodactyl/wings to 1.12.1 or later.","affected":[{"fixed":"1.12.1","introduced":"0"}],"component":"github.com/pterodactyl/wings","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.12.1"],"ghsa_id":"GHSA-hr7j-63v7-vj7g","id":"tcs_01M5KGE34VRRK1KCMHFFB6W66Z","modified_at":"2026-02-23T19:41:19.875455Z","published_at":"2026-02-23T18:23:12Z","references":["https://osv.dev/vulnerability/GO-2026-4497","https://github.com/pterodactyl/panel/security/advisories/GHSA-hr7j-63v7-vj7g","https://github.com/pterodactyl/panel/commit/0e74f3aadec89405751ec602c77fc1d030a417c0","https://github.com/pterodactyl/panel/releases/tag/v1.12.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-4497","url":"https://osv.dev/vulnerability/GO-2026-4497"}],"summary":"Pterodactyl Panel's SFTP sessions remain active after user account deletion or password change in github.com/pterodactyl/wings"}