Is Pelican safe from CVE-2025-49132? #361

Closed
opened 2026-02-04 17:44:37 +03:00 by OVERLORD · 1 comment
Owner

Originally created by @marpisco on GitHub (Jun 18, 2025).

Currently, CVE-2025-49132 (which isn't yet, at the time of writing this, public) affects Pterodactyl Panel, which is what Pelican is based out of. Would this vulnerability affect Pelican Panel?

A patch has been released by Pterodactyl here: 24c82b0e33.patch

It appears to affect LocaleRequest and LocaleController from Pterodactyl, which do not appear to be apart of Pelicans code.

Originally created by @marpisco on GitHub (Jun 18, 2025). Currently, CVE-2025-49132 (which isn't yet, at the time of writing this, public) affects Pterodactyl Panel, which is what Pelican is based out of. Would this vulnerability affect Pelican Panel? A patch has been released by Pterodactyl here: https://github.com/pterodactyl/panel/commit/24c82b0e335fb5d7a844226b08abf9f176e592f0.patch It appears to affect LocaleRequest and LocaleController from Pterodactyl, which do not appear to be apart of Pelicans code.
Author
Owner

@rmartinoscar commented on GitHub (Jun 18, 2025):

The security vulnerability patched in Pterodactyl 1.11.11 does not affect Pelican! There is no action required when using the latest version of Pelican.

@rmartinoscar commented on GitHub (Jun 18, 2025): The security vulnerability patched in Pterodactyl 1.11.11 does **not** affect Pelican! There is no action required when using the latest version of Pelican.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/panel#361