pkg:Go/github.com/dragonflyoss/dragonfly

All known vulnerabilities

• LOW3.7CVE-2025-59410DragonFly's tiny file download uses hard coded HTTP protocol in d7y.io/dragonfly
  from 0
• LOW3.7CVE-2025-59410DragonFly's tiny file download uses hard coded HTTP protocol in d7y.io/dragonfly
  from 0, < 2.1.0
• —CVE-2025-59354DragonFly has weak integrity checks for downloaded files in d7y.io/dragonfly
  from 0
• —CVE-2025-59354DragonFly has weak integrity checks for downloaded files in d7y.io/dragonfly
  from 0, < 2.1.0
• —DragonFly's manager generates mTLS certificates for arbitrary IP addresses in d7y.io/dragonfly
  from 0, < 2.1.0
• —DragonFly's manager generates mTLS certificates for arbitrary IP addresses in d7y.io/dragonfly
  from 0
• —DragonFly vulnerable to arbitrary file read and write on a peer machine in d7y.io/dragonfly
  from 0
• —DragonFly vulnerable to arbitrary file read and write on a peer machine in d7y.io/dragonfly
  from 0, < 2.1.0
• —DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error in d7y.io/dragonfly
  from 0, < 2.1.0
• —DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error in d7y.io/dragonfly
  from 0
• —Dragonfly vulnerable to timing attacks against Proxy’s basic authentication in d7y.io/dragonfly
  from 0
• —Dragonfly vulnerable to timing attacks against Proxy’s basic authentication in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly's directories created via os.MkdirAll are not checked for permissions in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly's directories created via os.MkdirAll are not checked for permissions in d7y.io/dragonfly
  from 0
• —Dragonfly incorrectly handles a task structure’s usedTrac field in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly incorrectly handles a task structure’s usedTrac field in d7y.io/dragonfly
  from 0
• —Dragonfly's manager makes requests to external endpoints with disabled TLS authentication in d7y.io/dragonfly
  from 0
• —Dragonfly's manager makes requests to external endpoints with disabled TLS authentication in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly vulnerable to server-side request forgery in d7y.io/dragonfly
  from 0
• —Dragonfly vulnerable to server-side request forgery in d7y.io/dragonfly
  from 0, < 2.1.0
• —Dragonfly doesn't have authentication enabled for some Manager’s endpoints in d7y.io/dragonfly
  from 0
• —Dragonfly doesn't have authentication enabled for some Manager’s endpoints in d7y.io/dragonfly
  from 0, < 2.1.0