Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2025-3612" }