CVE-2025-30206

Description

Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel

Affected packages (2)

• Go/github.com/donknap/dpanelfrom 0, < 1.6.1
• Go/github.com/donknap/dpanelfrom 0, < 1.6.1

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-30206
• PATCHhttps://github.com/donknap/dpanel
• WEBhttps://github.com/donknap/dpanel/security/advisories/GHSA-j752-cjcj-w847
• WEBhttps://pkg.go.dev/vuln/GO-2025-3612