Go/github.com/dragonflyoss/dragonfly CVE-2025-59346: medium 5.3, EPSS 0.25%

Dragonfly vulnerable to server-side request forgery

Action: Upgrade github.com/dragonflyoss/dragonfly to 2.1.0 or later.

go get github.com/dragonflyoss/dragonfly@v2.1.0

Affected

Fixed versions

Sources

• osv: GHSA-g2rq-jv54-wcpr
• nvd: CVE-2025-59346
• https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-g2rq-jv54-wcpr
• https://github.com/dragonflyoss/dragonfly
• https://github.com/dragonflyoss/dragonfly/blob/main/docs/security/dragonfly-comprehensive-report-2023.pdf
• https://pkg.go.dev/vuln/GO-2025-3968

CVE-2025-59346 · published 2025-09-17T19:27:38Z · modified 2025-09-26T16:16:15Z · JSON