Login Request a demo
DR
Product
drogon
by drogonframework · last CVE Oct 4, 2026
8
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 4Medium 4Low 0
Severity
All severities8Critical0High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add drogon to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-26137
6.1
0%
Jul 6
All versions of the package drogonframework/drogon are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values in the addHeader and…
Affected: All versions, or not specified
CVE-2026-105144
5.3
1%
Oct 4
Drogon Static File Router StaticFileRouter.cc route path traversal
Affected: 1.9.13-1; 10.0-beta.0; 10.0-beta.1; 10.0-beta.2; 10.0-beta.3
CVE-2022-3959
5.3
1%
Nov 11
drogon Session Hash small space of random values
Affected: before 1.8.2
CVE-2023-26138
4.3
0%
Jul 6
All versions of the package drogonframework/drogon are vulnerable to CRLF Injection when untrusted user input is used to set request headers in the addHeader function
Affected: All versions, or not specified
Showing 4