All issues

Search results

TLS certificate verification disabled across HTTP client layer, including process-wide overrides

Status: Open.

#296 In aaPanel/aaPanel;

· Lafunamor opened on Aug 24, 2026

Undisclosed hardware fingerprint telemetry with no opt-out

Status: Open.

#295 In aaPanel/aaPanel;

· Lafunamor opened on Aug 24, 2026

Hardening: non-CSPRNG tokens, MD5-signed certificate, TLS 1.0/1.1, dormant session['debug'] gate bypass

Status: Open.

#294 In aaPanel/aaPanel;

· Lafunamor opened on Aug 24, 2026

Panel passwords are hashed with MD5 (password_salt)

Status: Open.

#293 In aaPanel/aaPanel;

· Lafunamor opened on Aug 24, 2026

Panel auto-update executes unsigned remote script as root with TLS verification disabled

Status: Open.

#292 In aaPanel/aaPanel;

· Lafunamor opened on Aug 24, 2026

Improve Nginx HTTP-01 readiness check for IP SSL temporary vhost to avoid transient 404

Status: Open.

#291 In aaPanel/aaPanel;

· Grid2077 opened on Aug 13, 2026

SQL Server V2 – Remote Server Cannot Be Added and Database Creation Fails

Status: Open.

#290 In aaPanel/aaPanel;

· mnarbash opened on Aug 13, 2026

MySQL service watchdog creates an unauthenticated aborted connection every 10 seconds

Status: Open.

#289 In aaPanel/aaPanel;

· ooopus opened on Aug 6, 2026

[Bug] MariaDB 10.11 installation fails on Ubuntu 26.04 with CMake 4.x due to ColumnStore policy compatibility

Status: Open.

#288 In aaPanel/aaPanel;

· ooopus opened on Aug 3, 2026

[Bug] PHP 8.5 has mbstring compiled in, but mbstring.sh appends mbstring.so and causes "Module already loaded"

Status: Open.

#287 In aaPanel/aaPanel;

· ooopus opened on Aug 3, 2026

GetClientIp() ignores reverse proxy headers

Status: Open.

#286 In aaPanel/aaPanel;

· ThesiiNCey opened on Jul 26, 2026

malicious_file_scanning task causes VM freeze due to unthrottled I/O

Status: Open.

#283 In aaPanel/aaPanel;

· N0N4M3BNS opened on Jun 22, 2026