Donknap vulnerabilities
We track 2 vulnerabilities in Donknap products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 15, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Donknap vulnerabilities
- 8.1 High severity
dpanel: Improper Limitation of a Pathname to a Restricted Directory
DPanel is an open source server management panel written in Go. Prior to 1.9.2, DPanel has an arbitrary file deletion vulnerability in the /api/common/attach/delete interface. Authenticated users can delete arbitrary files on the server via path traversal. Whe
- 9.8 Critical severity
dpanel: Use of Hard-coded Cryptographic Key
Dpanel is a Docker visualization panel system which provides complete Docker management functions. The Dpanel service contains a hardcoded JWT secret in its default configuration, allowing attackers to generate valid JWT tokens and compromise the host machine.