Dragonfly (Linuxfoundation) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 311 known versions, newest CVE from 2026-01-22. Vendor: Linuxfoundation.
CVEs of Dragonfly
- CVE-2026-24124 - CVSS 9.8 (critical), 2026-01-22: Dragonfly is an open source P2P-based file distribution and image acceleration system. In versions 2.4.1-rc.0 and below, the Job API endpoints (/api/v1/jobs)…
- CVE-2025-59410 - CVSS 5.5 (medium), 2025-09-17: Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the code in the scheduler for downloading a tiny file…
- CVE-2025-59354 - CVSS 5.5 (medium), 2025-09-17: Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the DragonFly2 uses a variety of hash functions,…
- CVE-2025-59350 - CVSS 5.3 (medium), 2025-09-17: Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the access control mechanism for the Proxy feature uses…
- CVE-2025-59353 - CVSS 7.7 (high), 2025-09-17: Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, a peer can obtain a valid TLS certificate for arbitrary…
- CVE-2025-59349 - CVSS 3.3 (low), 2025-09-17: Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, DragonFly2 uses the os.MkdirAll function to create…
- CVE-2025-59352 - CVSS 9.8 (critical), 2025-09-17: Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests…
- CVE-2025-59348 - CVSS 7.5 (high), 2025-09-17: Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the processPieceFromSource method does not update the…
- CVE-2025-59351 - CVSS 5.3 (medium), 2025-09-17: Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the first return value of a function is dereferenced…
- CVE-2025-59347 - CVSS 6.5 (medium), 2025-09-17: Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The Manager disables TLS certificate verification in…
- CVE-2025-59346 - CVSS 5.5 (medium), 2025-09-17: Dragonfly is an open source P2P-based file distribution and image acceleration system. Versions prior to 2.1.0 contain a server-side request forgery (SSRF)…
- CVE-2025-59345 - CVSS 9.1 (critical), 2025-09-17: Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The /api/v1/jobs and /preheats endpoints in Manager web…
- CVE-2023-27584 - CVSS 9.8 (critical), 2024-09-19: Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation (CNCF) as an…
