| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/pterodactyl/wings | < 1.13.0 | 1.13.0 |
Config file parsers, json, yaml, xml etc in parser.go have no file size limit/checks, allowing for a giant config file to potentially OOM the wings process.
All wings users who have an egg with a non-file parser configuration file setting.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free