Dragonfly
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 31, 2005 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →DragonflyDB `CMS.INITBYDIM` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write
Dragonfly tiny file download uses hard coded HTTP protocol
Dragonfly has weak integrity checks for downloaded files
Manager generates mTLS certificates for arbitrary IP addresses
Dragonfly allows arbitrary file read and write on a peer machine
Dragonfly possibly panics due to nil pointer dereference when using variables created alongside an error
Timing attacks against Proxy’s basic authentication are possible
Directories created via os.MkdirAll are not checked for permissions
Dragonfly incorrectly handles a task structure’s usedTraffic field
Dragonfly Manager makes requests to external endpoints with disabled TLS authentication
Monitor Dragonfly in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.