DR
Product
drogon
8
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add drogon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25297 | 8.8 | Feb 21 | Arbitrary File Write Affected: before 1.7.5 |
| CVE-2021-35397 | 7.5 | Aug 4 | A path traversal vulnerability in the static router for Drogon from 1.0.0-beta14 to 1.6.0 could allow an unauthenticated, remote attacker to arbitrarily read files Affected: 1.1.0 through 1.6.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +4 more |
| CVE-2026-94144 | 7.3 | Sep 21 | drogonframework drogon ORM Criteria.cc makeCriteria sql injection Affected: 1.9.0; 1.9.1; 1.9.2; 1.9.3; 1.9.4; 1.9.5; +8 more |
| CVE-2026-94143 | 7.3 | Sep 21 | drogonframework drogon ORM Mapper Mapper.h orderBy sql injection Affected: 1.9.0; 1.9.1; 1.9.2; 1.9.3; 1.9.4; 1.9.5; +8 more |
| CVE-2023-26137 | 6.1 | Jul 6 | All versions of the package drogonframework/drogon are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values in the addHeader and… Affected: All versions, or not specified |
| CVE-2026-105144 | 5.3 | Oct 4 | Drogon Static File Router StaticFileRouter.cc route path traversal Affected: 1.9.13-1; 10.0-beta.0; 10.0-beta.1; 10.0-beta.2; 10.0-beta.3 |
| CVE-2022-3959 | 5.3 | Nov 11 | drogon Session Hash small space of random values Affected: before 1.8.2 |
| CVE-2023-26138 | 4.3 | Jul 6 | All versions of the package drogonframework/drogon are vulnerable to CRLF Injection when untrusted user input is used to set request headers in the addHeader function Affected: All versions, or not specified |
Showing 8