Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: PandaXGO Clear all filters
TI-2025-13786 CVE-2025-15108 · GHSA-hj3q-q387-m5hr

PandaXGO PandaX JWT Secret config.yml hard-coded key

Priority MEDIUM 61

A vulnerability was detected in PandaXGO PandaX up to fb8ff40f7ce5dfebdf66306c6d85625061faf7e5.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00322 Published 2025-12-27 No fix listed CWE-320
TI-2024-02384 CVE-2024-2564 · GHSA-f5gv-m2h2-fpc6

PandaXGO PandaX user.go ExportUser path traversal

Priority HIGH 65

A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00507 Published 2024-03-17 No fix listed CWE-24
TI-2024-02383 CVE-2024-2563 · GHSA-3rxx-hfrv-77fv

PandaXGO PandaX upload.go DeleteImage path traversal

Priority HIGH 75

A vulnerability has been found in PandaXGO PandaX up to 20240310 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0085 Published 2024-03-17 No fix listed CWE-24
TI-2024-02382 CVE-2024-2562 · GHSA-f3qg-4gp2-rr72

PandaXGO PandaX role_menu.go InsertRole sql injection

Priority HIGH 75

A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-03-17 No fix listed CWE-89