—
GO-2025-3966
Dragonfly's manager makes requests to external endpoints with disabled TLS authentication in d7y.io/dragonfly
Quick fix
GO-2025-3966 — d7y.io/dragonfly/v2: upgrade to the fixed version with the command below.
go get d7y.io/dragonfly/v2@v2.1.0Details
Dragonfly's manager makes requests to external endpoints with disabled TLS authentication in d7y.io/dragonfly
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/dragonflyoss/dragonfly
Introduced in:
0No fixed version published yet for github.com/dragonflyoss/dragonfly (go modules). Pin to a known-safe version or switch to an alternative.