drogon vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

DR

Product

drogon

by drogonframework · last CVE Oct 4, 2026

8

CVEs

0

On KEV

8.8

Max CVSS

1

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 0High 4Medium 4Low 0

Severity

All severities8 Critical0 High4 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add drogon to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-25297	8.8	2%	Feb 21	Arbitrary File Write Affected: before 1.7.5
CVE-2021-35397	7.5	4%	Aug 4	A path traversal vulnerability in the static router for Drogon from 1.0.0-beta14 to 1.6.0 could allow an unauthenticated, remote attacker to arbitrarily read files Affected: 1.1.0 through 1.6.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +4 more
CVE-2026-94144	7.3	0%	Sep 21	drogonframework drogon ORM Criteria.cc makeCriteria sql injection Affected: 1.9.0; 1.9.1; 1.9.2; 1.9.3; 1.9.4; 1.9.5; +8 more
CVE-2026-94143	7.3	0%	Sep 21	drogonframework drogon ORM Mapper Mapper.h orderBy sql injection Affected: 1.9.0; 1.9.1; 1.9.2; 1.9.3; 1.9.4; 1.9.5; +8 more