Vulnerabilities in 1Panel-dev
86 resultsCVE-2026-77525MEDIUMMaxKB: Management chat-record routes trust path application_id but load ChatRecord by global chat_idEPSS 0.2%CVE-2026-39426MEDIUMMaxKB: Stored XSS via Unsanitized iframe_render ParsingEPSS 0.2%CVE-2026-39425MEDIUMMaxKB: Stored XSS via Unsanitized html_rander Tags in Markdown RenderingEPSS 0.2%CVE-2026-39423MEDIUMStored XSS via Eval Injection in EchartsRander ComponentEPSS 0.2%CVE-2026-108703MEDIUMCordysCRM through 1.9.3 Missing Authorization via /approval-resource/pushEPSS 0.2%CVE-2026-45413MEDIUMMaxKB: Unsalted MD5 Password HashingEPSS 0.1%