Back to Changelog
Panel Backend
v1.0.486
Major external API expansion (Laravel, Node.js, Python, Git & Deploy, Log Management, Security Advisor) with a hardened, granular scope catalog.
New Features
3- Exposed Laravel (21), Node.js (18), Python (19), Git & Deploy (43), Log Management (26), and Security Advisor (1) endpoints through the external API, with license feature gates and new scope families (apps:*, git:*, logs:*).
- Expanded the API key scope catalog from 33 to 50 actions (cloudflare/docker/security/license/migrations/terminal/server:write/services); spec registry grew from 268 to 406 endpoints.
- Added IP-based panel access to the security score, and moved hidepid under the Isolation category.
Bug Fixes
3- Fixed sites showing the default Coming Soon page instead of the correct vhost on servers behind NAT/private IPs.
- Fixed cPanel migration to discover parked/alias domains and transfer parked domains as a 301 redirect instead of copying content.
- Fixed the Local Mail Server on/off toggle so it is wired to the Postfix settings tab.
Security Fixes
4- Service start/stop/restart can no longer be performed with read-only server:read (services:* or server:write is now required).
- Session revoke now requires accounts:write; Security, IP Addresses, System Cron, and Audit areas were split into granular scopes (existing wildcard *:* keys keep working unchanged).
- Closed a cross-account domain enumeration leak in /v1/search.
- panel-settings previously had no scope requirement; it now requires *:*.