Feed/CVE-2026-52857
CVE-2026-52857MEDIUMCVSS 5.5

CVE-2026-52857

Published Jul 31, 2026·Updated Jul 31, 2026

NVD Description

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, and xml configuration-file parsers in parser.go can process an oversized non-file parser configuration file and exhaust Wings process memory. This issue is fixed in version 1.13.0.

Affected Packages (1)

github.com/pterodactyl/wingsGO
Fixed in 1.13.0

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free