Go/github.com/dragonflyoss/dragonfly CVE-2025-59347: medium, EPSS 0.17%

Dragonfly's manager makes requests to external endpoints with disabled TLS authentication

Action: Upgrade github.com/dragonflyoss/dragonfly to 2.1.0 or later.

go get github.com/dragonflyoss/dragonfly@v2.1.0

Affected

Fixed versions

Sources

• osv: GHSA-98x5-jw98-6c97
• https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-98x5-jw98-6c97
• https://nvd.nist.gov/vuln/detail/CVE-2025-59347
• https://github.com/dragonflyoss/dragonfly
• https://github.com/dragonflyoss/dragonfly/blob/main/docs/security/dragonfly-comprehensive-report-2023.pdf
• https://pkg.go.dev/vuln/GO-2025-3966

CVE-2025-59347 · published 2025-09-17T19:28:14Z · modified 2025-09-26T16:16:47Z · JSON