All packages
Pangolin vulnerabilities
3 known CVE vulnerabilities in Pangolin, translated and rated.
- CVE-2026-72564Critical
An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attacker to authenticate to any resource in any organization by reusing an access token issued for a different resource.
- CVE-2025-56332Critical
Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default Configuration
- CVE-2025-56333Critical
An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component.