{"id":"GO-2025-4209","revision":"f49fc8797dff4d5ab61528b78bf5a9a3","records":[{"revision":"f49fc8797dff4d5ab61528b78bf5a9a3","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4209","aliases":["CVE-2025-66507","GHSA-qmg5-v42x-qqhq"],"title":"1Panel – CAPTCHA Bypass via Client-Controlled Flag in github.com/1Panel-dev/1Panel","description":"1Panel – CAPTCHA Bypass via Client-Controlled Flag in github.com/1Panel-dev/1Panel","state":0,"publishedAt":"2025-12-15T19:37:35+00:00","modifiedAt":"2026-03-03T04:57:46.11572+00:00","affected":[{"ecosystem":"Go","name":"github.com/1Panel-dev/1Panel","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"2.0.14+incompatible"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/1Panel-dev/1Panel/core","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20251128030527-ac43f00273be"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-qmg5-v42x-qqhq","https://nvd.nist.gov/vuln/detail/CVE-2025-66507","https://github.com/1Panel-dev/1Panel/commit/ac43f00273be745f8d04b90b6e2b9c1a40ef7bca","https://github.com/1Panel-dev/1Panel/releases/tag/v2.0.14"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4209","license":"OSV · upstream source license applies","key":"osv:GO-2025-4209","identifiers":["GO-2025-4209","CVE-2025-66507","GHSA-qmg5-v42x-qqhq"]},"retained":false,"historicalAffected":[]}],"coverage":[]}