CVE-2025-59351 Dragonfly possibly panics due to nil pointer dereference when using variables created alongside an error

🗓️ 17 Sep 2025 19:46:41Reported by GitHub_MType

Dragonfly may panic from nil pointer dereference when a function returns an error; fixed in 2.1.0.

Reporter	Title	Published	Views	Family All 55
CNNVD	Dragonfly 代码问题漏洞	17 Sep 202500:00	–	cnnvd
CVE	CVE-2025-59351	17 Sep 202519:46	–	cve
EUVD	EUVD-2025-29769	3 Oct 202520:07	–	euvd
Github Security Blog	DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error	17 Sep 202520:10	–	github
GitLab Advisory Database	DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error	17 Sep 202500:00	–	gitlab
NVD	CVE-2025-59351	17 Sep 202520:15	–	nvd
OPENSUSE Linux	govulncheck-vulndb-0.0.20250924T192141-1.1 on GA media (moderate)	26 Sep 202500:00	–	opensuse
OSV	CVE-2025-59351 Dragonfly possibly panics due to nil pointer dereference when using variables created alongside an error	17 Sep 202519:46	–	osv
OSV	GHSA-4MHV-8RH3-4GHW DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error	17 Sep 202520:10	–	osv
OSV	GO-2025-3970 DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error in d7y.io/dragonfly	24 Sep 202519:21	–	osv

[
  {
    "vendor": "dragonflyoss",
    "product": "dragonfly",
    "versions": [
      {
        "version": "< 2.1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/dragonflyoss/dragonfly/security/advisories/GHSA-4mhv-8rh3-4ghw
github	www.github.com/dragonflyoss/dragonfly/blob/main/docs/security/dragonfly-comprehensive-report-2023.pdf

17 Sep 2025 19:46Current

CVSS 46.9

EPSS0.00293

CWE-476