Github.com/pterodactyl/wings

This hub aggregates every CVE we track for Github.com/pterodactyl/wings, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 10 most recently published vulnerabilities affecting Github.com/pterodactyl/wings.

• CVE-2026-21696Endless reprocessing/reupload of activity log data due to SQLite max parameters limit not being considered6.5Jan 19, 2026
• CVE-2025-69199Pterodactyl Wings's websocket endpoints have no visible rate limits or monitoring, allowing for DOS attacks under certain circumstances6.5Jan 19, 2026
• CVE-2025-68954Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced5.4Jan 6, 2026
• CVE-2024-34066Arbitrary File Write/Read in Pterodactyl wings8.4May 3, 2024
• CVE-2024-34068Server-side Request Forgery during remote file pull in Pterodactyl wings6.4May 3, 2024
• CVE-2024-27102Improper isolation of server file access in github.com/pterodactyl/wings9.9Mar 13, 2024
• CVE-2023-32080Wings vulnerable to escape to host from installation container9.0May 10, 2023
• CVE-2023-25168Symbolic Link (Symlink) Following allowing the deletion of files and directories on the host system in wings9.6Feb 8, 2023
• CVE-2023-25152Symbolic Link (Symlink) Following in github.com/pterodactyl/wings8.4Feb 8, 2023
• CVE-2021-32699Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings6.5Jun 22, 2021