Affected by GO-2023-1555
and 4 other vulnerabilities
GO-2023-1555: Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system in github.com/pterodactyl/wings
GO-2023-1768: Wings vulnerable to escape to host from installation container in github.com/pterodactyl/wings
GO-2024-2642: Pterodactyl Wings vulnerable to improper isolation of server file access in github.com/pterodactyl/wings
GO-2024-2814: Pterodactyl Wings vulnerable to Arbitrary File Write/Read in github.com/pterodactyl/wings
GO-2024-2815: Pterodactyl Wings vulnerable to Server-Side Request Forgery during remote file pull in github.com/pterodactyl/wings
Scheduler configures the internal cronjob system for Wings and returns the scheduler
instance to the caller. This should only be called once per application lifecycle, additional
calls will result in an error being returned.