Dragonflyoss

13 CVEs across 2 Dragonflyoss products. Browse Dragonflyoss vulnerabilities, severities, and proof-of-concept exploits.

Dragonflyoss products with known CVEs

ProductCVEs
Dragonfly12
Dragonfly21
Dragonflyoss CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-24124Critical9.82026-01-22Dragonfly is an open source P2P-based file distribution and image acceleration system. In versions 2.4.1-rc.0 and below, the Job API endpoints (/api/v1/jobs) l…
CVE-2025-59410Low3.72025-09-17Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the code in the scheduler for downloading a tiny file is…
CVE-2025-59354Medium5.32025-09-17Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the DragonFly2 uses a variety of hash functions, includi…
CVE-2025-59353High7.52025-09-17Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, a peer can obtain a valid TLS certificate for arbitrary…
CVE-2025-59352Critical9.82025-09-17Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests…
CVE-2025-59351Medium5.32025-09-17Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the first return value of a function is dereferenced eve…
CVE-2025-59350Medium5.32025-09-17Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the access control mechanism for the Proxy feature uses…
CVE-2025-59349Low3.32025-09-17Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, DragonFly2 uses the os.MkdirAll function to create certa…
CVE-2025-59348High7.52025-09-17Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the processPieceFromSource method does not update the st…
CVE-2025-59347Medium6.52025-09-17Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The Manager disables TLS certificate verification in HTT…
CVE-2025-59346Medium5.32025-09-17Dragonfly is an open source P2P-based file distribution and image acceleration system. Versions prior to 2.1.0 contain a server-side request forgery (SSRF) vul…
CVE-2025-59345Critical9.12025-09-17Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The /api/v1/jobs and /preheats endpoints in Manager web…
CVE-2023-27584Critical9.82024-09-19Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation (CNCF) as an Incub…