1panel-v2-bin 2.4.2-1
1Panel v2, a modern open source linux panel (official binary)
675f640a979d
(not head) · back to headconfig.json file.
/v1/packages/1panel-v2-bin/versions SHAs are authoritative.
Metadata
Relations
Depends
Optional dependencies
Conflicts
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 30625e660fc9head | verified | 2026-11-05 16:02 | 20 |
| 26f75b9862e3 | verified | 2026-11-05 16:14 | 20 |
| dd239d2c22ac | verified | 2026-11-05 16:12 | 20 |
| b2d9a40db979 | verified | 2026-11-05 16:04 | 20 |
| 675f640a979d | verified | 2026-11-05 16:02 | 20 |
Revision findings
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
LOCAL_IP=$(_1panel_get_local_ip)
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
PANEL_ENTRANCE=$(cat /dev/urandom | head -n 16 | md5sum | head -c 10)
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
PANEL_USERNAME=$(cat /dev/urandom | head -n 16 | md5sum | head -c 10)
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
PANEL_PASSWORD=$(cat /dev/urandom | head -n 16 | md5sum | head -c 10)
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
PANEL_PORT=$(shuf -i 10000-65535 -n 1)
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
port_retry_count=$((port_retry_count + 1))
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
LOCAL_IP=$(_1panel_get_local_ip)
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
LOCAL_IP=$(_1panel_get_local_ip)
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
gateway=$(printf '%d.%d.%d.%d' \
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
$((0x${hex_gateway:6:2} & 0xff)) \command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
$((0x${hex_gateway:4:2} & 0xff)) \command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
$((0x${hex_gateway:2:2} & 0xff)) \command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
$((0x${hex_gateway:0:2} & 0xff)))command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
candidates=$(grep -B1 'host LOCAL' /proc/1/net/fib_trie 2>/dev/null \
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local mask=$((0xffffffff << (32 - prefix) & 0xffffffff))
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local gw_net=$(( ((g1<<24) + (g2<<16) + (g3<<8) + g4) & mask ))
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local ip_net=$(( ((i1<<24) + (i2<<16) + (i3<<8) + i4) & mask ))
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
ip=$(ip -4 -o addr show 2>/dev/null \
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
ip=$(ip -4 route get 1.1.1.1 2>/dev/null \
command-substitution
in
1panel-v2-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
ip=$(ip -4 addr show 2>/dev/null \
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.