Skip to content
CVE PROGRAM SOURCE RECORD2.7 Low

CVE-2025-59351

Dragonfly possibly panics due to nil pointer dereference when using variables created alongside an error

Description

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the first return value of a function is dereferenced even when the function returns an error. This can result in a nil dereference, and cause code to panic. This vulnerability is fixed in 2.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

dragonflyoss dragonfly

  • < 2.1.0affected

References