VDB
Sign up
—

GO-2025-3970

DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error in d7y.io/dragonfly

Quick fix

GO-2025-3970 — d7y.io/dragonfly/v2: upgrade to the fixed version with the command below.

go get d7y.io/dragonfly/v2@v2.1.0

Details

DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error in d7y.io/dragonfly

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/d7y.io/dragonfly/v2
Introduced in: 0Fixed in: 2.1.0
Fixgo get d7y.io/dragonfly/v2@v2.1.0
Go/github.com/dragonflyoss/dragonfly
Introduced in: 0

No fixed version published yet for github.com/dragonflyoss/dragonfly (go modules). Pin to a known-safe version or switch to an alternative.

References