v1.10.33-lts

1Panel-dev/1Panelv1.10.33-ltsDec 5, 2025by wanghe-fit2cloud

AI Summary

An LTS release primarily addressing security vulnerabilities and stability issues, including PHP extension installation and critical authentication bypass fixes.

Key Highlights

  • Fixed the issue where installing the imap extension failed in PHP 8.4.6 runtime
  • Fixed X-Forwarded-For header bypass allowing forged authorized IPs
  • Fixed login endpoint bypassing captcha verification
  • Fixed data migration issues when switching local backup accounts

New Features

  • PHP 8.4.6 IMAP extension fix
  • Security patch for X-Forwarded-For bypass
  • Login captcha bypass fix

Full Release Notes

## 🚀 Quick Start

Execute the script below and follow the prompts to install 1Panel:

```bash
curl -sSL https://resource.1panel.pro/quick_start.sh -o quick_start.sh && bash quick_start.sh
```

Please refer to our [documentation](https://docs.1panel.pro/quick_start/) for more details.

## 🛠️ Bug Fixes

* Fixed the issue where installing the imap extension failed in the PHP 8.4.6 runtime by @zhengkunwang223 in https://github.com/1Panel-dev/appstore/pull/5833
* Fixed a data migration issue that occurred in some cases when switching local backup accounts by @ssongliu in https://github.com/1Panel-dev/1Panel/pull/11190
* Fixed X-Forwarded-For header bypass allowing forged authorized IPs by @ssongliu in https://github.com/1Panel-dev/1Panel/pull/11183
* Fixed login endpoint bypassing captcha verification by @ssongliu in https://github.com/1Panel-dev/1Panel/pull/11187