DR
Product
dragonfly
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 6Low 3
Watch
Add dragonfly to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-59410 | 3.7 | Sep 17 | Dragonfly tiny file download uses hard coded HTTP protocol Affected: < 2.1.0 |
| CVE-2025-59349 | 3.3 | Sep 17 | Directories created via os.MkdirAll are not checked for permissions Affected: < 2.1.0 |
| CVE-2026-49254 | 2.9 | Sep 15 | Dragonfly Manager OAuth provider client_secret disclosure via unauthenticated GET /api/v1/oauth Affected: < 2.4.4 |
Showing 3