Skip to content
OpenAdvisories

Package · Go

github.com/dragonflyoss/dragonfly

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2025-59353

    Manager generates mTLS certificates for arbitrary IP addresses

    Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, a peer can obtain a valid TLS certificate for arbitrary IP addresses, effectively rendering the mTLS authentication useless. The issue is that the Manager’s…

    dragonflyoss dragonfly d7y.io/dragonfly/v2 github.com/dragonflyoss/dragonfly Go
  • High 7.7
    CVE-2025-59345

    Dragonfly did not enable authentication for some Manager’s endpoints

    Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The /api/v1/jobs and /preheats endpoints in Manager web UI are accessible without authentication. Any user with network access to the Manager can create, de…

    dragonflyoss dragonfly d7y.io/dragonfly/v2 github.com/dragonflyoss/dragonfly Go