—
GO-2025-3969
DragonFly's manager generates mTLS certificates for arbitrary IP addresses in d7y.io/dragonfly
Quick fix
GO-2025-3969 — d7y.io/dragonfly/v2: upgrade to the fixed version with the command below.
go get d7y.io/dragonfly/v2@v2.1.0Details
DragonFly's manager generates mTLS certificates for arbitrary IP addresses in d7y.io/dragonfly
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/dragonflyoss/dragonfly
Introduced in:
0No fixed version published yet for github.com/dragonflyoss/dragonfly (go modules). Pin to a known-safe version or switch to an alternative.