This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+6 more
Affected surfaces
ReleasePort's take
Light signalStarting with v1.12.3, JWT generation APIs will raise an exception if no JwtScope enum value is provided.
Why it matters: v1.12.3 enforces that at least one JwtScope must be supplied; missing scopes trigger exceptions, affecting all callers of the JWT generation API.
Summary
AI summaryJWT generation now requires at least one JwtScope enum value, raising an exception without it.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | Medium |
JWTs now require at least one JwtScope enum value; missing scope raises an exception. JWTs now require at least one JwtScope enum value; missing scope raises an exception. Source: llm_adapter@2026-05-23 Confidence: high |
— |
| Feature | Medium |
Adds rate limit when changing email addresses on an account. Adds rate limit when changing email addresses on an account. Source: llm_adapter@2026-05-23 Confidence: low |
— |
| Feature | Medium |
Adds Java 25 as an option to the default Minecraft eggs. Adds Java 25 as an option to the default Minecraft eggs. Source: llm_adapter@2026-05-23 Confidence: low |
— |
| Feature | Medium |
Updates Paper install script and adds support for Java 25 to default egg. Updates Paper install script and adds support for Java 25 to default egg. Source: llm_adapter@2026-05-23 Confidence: low |
— |
| Bugfix | Medium |
Fixes backups, databases, and allocation creation to properly acquire a lock before checking resource limits. Fixes backups, databases, and allocation creation to properly acquire a lock before checking resource limits. Source: llm_adapter@2026-05-23 Confidence: high |
— |
Full changelog
Fixed
- Adds a rate limit when changing email addresses on an account to prevent account enumeration.
- Fixes backups, databases, and allocation creation to properly acquire a lock before checking if users can create more resources on a server.
Changed
- Added Java 25 as an option to the default Minecraft eggs.
- Updates Paper install script and adds support for Java 25 to default egg.
- JWTs now require at least one
JwtScopeenum value to be set when generating. Failure to provide a scope will result in an exception being raised.
Breaking Changes
- JWT generation now mandates at least one JwtScope enum value; omission raises an exception.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About panel
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Related context
Beta — feedback welcome: [email protected]