pkg:Go/d7y.io/dragonfly/v2

All known vulnerabilities

• CRITICAL9.8CVE-2023-27584Dragonfly2 has hard coded cyptographic key in d7y.io/dragonfly
  >= 2.1.0-alpha.0, < 2.1.0-beta.1
• CRITICAL9.8CVE-2023-27584Dragonfly2 has hard coded cyptographic key in d7y.io/dragonfly
  from 0, < 2.1.0-beta.1
• LOW3.7CVE-2025-59410DragonFly's tiny file download uses hard coded HTTP protocol in d7y.io/dragonfly
  from 0, < 2.1.0
• LOW3.7DragonFly's tiny file download uses hard coded HTTP protocol in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly Manager Job API Unauthenticated Access in d7y.io/dragonfly
  from 0, < 2.4.1
• —Dragonfly Manager Job API Unauthenticated Access in d7y.io/dragonfly
  from 0, < 2.4.1
• —DragonFly has weak integrity checks for downloaded files in d7y.io/dragonfly
  from 0, < 2.1.0
• —DragonFly has weak integrity checks for downloaded files in d7y.io/dragonfly
  from 0, < 2.1.0
• —DragonFly's manager generates mTLS certificates for arbitrary IP addresses in d7y.io/dragonfly
  from 0, < 2.1.0
• —DragonFly's manager generates mTLS certificates for arbitrary IP addresses in d7y.io/dragonfly
  from 0, < 2.1.0
• —DragonFly vulnerable to arbitrary file read and write on a peer machine in d7y.io/dragonfly
  from 0, < 2.1.0
• —DragonFly vulnerable to arbitrary file read and write on a peer machine in d7y.io/dragonfly
  from 0, < 2.1.0
• —DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error in d7y.io/dragonfly
  from 0, < 2.1.0
• —DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly vulnerable to timing attacks against Proxy’s basic authentication in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly vulnerable to timing attacks against Proxy’s basic authentication in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly's directories created via os.MkdirAll are not checked for permissions in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly's directories created via os.MkdirAll are not checked for permissions in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly incorrectly handles a task structure’s usedTrac field in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly incorrectly handles a task structure’s usedTrac field in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly's manager makes requests to external endpoints with disabled TLS authentication in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly's manager makes requests to external endpoints with disabled TLS authentication in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly vulnerable to server-side request forgery in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly vulnerable to server-side request forgery in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly doesn't have authentication enabled for some Manager’s endpoints in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly doesn't have authentication enabled for some Manager’s endpoints in d7y.io/dragonfly
  from 0, < 2.1.0