Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/dragonflyoss/dragonfly

go · Repository · Package

Security Advisories for github.com/dragonflyoss/dragonfly in go

Moderate
14 days ago

DragonFly's tiny file download uses hard coded HTTP protocol GSA_kwCzR0hTQS1tY3ZwLXJwZ2ctOTI3M84ABMUC

go github.com/dragonflyoss/dragonfly
Moderate
15 days ago

DragonFly has weak integrity checks for downloaded files GSA_kwCzR0hTQS1oeDJoLXZqdzItOHI1NM4ABMUB

go github.com/dragonflyoss/dragonfly
High
15 days ago

DragonFly's manager generates mTLS certificates for arbitrary IP addresses GSA_kwCzR0hTQS0yNTV2LXF2ODQtMjlwNc4ABMUA

go github.com/dragonflyoss/dragonfly
Moderate
15 days ago

DragonFly vulnerable to arbitrary file read and write on a peer machine GSA_kwCzR0hTQS03OWh4LTNmcDgtaGo2Ns4ABMT_

go github.com/dragonflyoss/dragonfly
Moderate
15 days ago

DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error GSA_kwCzR0hTQS00bWh2LThyaDMtNGdod84ABMT-

go github.com/dragonflyoss/dragonfly
Moderate
15 days ago

Dragonfly vulnerable to timing attacks against Proxy’s basic authentication GSA_kwCzR0hTQS1jMmZjLTlxOWMtNTQ4Ns4ABMT9

go github.com/dragonflyoss/dragonfly
Low
15 days ago

Dragonfly's directories created via os.MkdirAll are not checked for permissions GSA_kwCzR0hTQS04NDI1LThyMmYtbXJ2Ns4ABMT7

go github.com/dragonflyoss/dragonfly
Moderate
15 days ago

Dragonfly incorrectly handles a task structure’s usedTrac field GSA_kwCzR0hTQS0ycWdyLWdmdmotcXBjcs4ABMT6

go github.com/dragonflyoss/dragonfly
Moderate
15 days ago

Dragonfly's manager makes requests to external endpoints with disabled TLS authentication GSA_kwCzR0hTQS05OHg1LWp3OTgtNmM5N84ABMT5

go github.com/dragonflyoss/dragonfly
High
15 days ago

Dragonfly vulnerable to server-side request forgery GSA_kwCzR0hTQS1nMnJxLWp2NTQtd2Nwcs4ABMT4

go github.com/dragonflyoss/dragonfly
High
15 days ago

Dragonfly doesn't have authentication enabled for some Manager’s endpoints GSA_kwCzR0hTQS04OXZjLXZmMzItY2g1Oc4ABMT3

go github.com/dragonflyoss/dragonfly

Filter by Severity

Moderate 7 High 3 Low 1