github.com/dragonflyoss/dragonfly vulnerabilities (Go)
11 vulnerabilities.
-
github.com/dragonflyoss/dragonflyGo Dragonfly tiny file download uses hard coded HTTP protocol 5.5 Medium -
github.com/dragonflyoss/dragonflyGo Dragonfly has weak integrity checks for downloaded files 5.5 Medium -
github.com/dragonflyoss/dragonflyGo Manager generates mTLS certificates for arbitrary IP addresses 7.7 High -
github.com/dragonflyoss/dragonflyGo Dragonfly allows arbitrary file read and write on a peer machine 6.9 Medium -
github.com/dragonflyoss/dragonflyGo Dragonfly possibly panics due to nil pointer dereference when using variables created alongside an error 2.7 Low -
github.com/dragonflyoss/dragonflyGo Timing attacks against Proxy’s basic authentication are possible 2.7 Low -
github.com/dragonflyoss/dragonflyGo Directories created via os.MkdirAll are not checked for permissions 2.0 Low -
github.com/dragonflyoss/dragonflyGo Dragonfly incorrectly handles a task structure’s usedTraffic field 5.5 Medium -
github.com/dragonflyoss/dragonflyGo Dragonfly Manager makes requests to external endpoints with disabled TLS authentication 2.7 Low -
github.com/dragonflyoss/dragonflyGo Dragonfly server-side request forgery vulnerability 5.5 Medium -
github.com/dragonflyoss/dragonflyGo Dragonfly did not enable authentication for some Manager’s endpoints 7.7 High