507 matches found
Dragonfly Access Control Vulnerability
Dragonfly is an open-source framework developed by DragonflyDB, capable of dynamically processing any content type. Versions of Dragonfly 2.4.1-rc.0 and earlier contained a access control vulnerability. This vulnerability stemmed from the absence of JWT authentication and RBAC authorization check...
Dragonfly Manager Job API Unauthenticated Access
Dragonfly Manager's Job REST API endpoints lack authentication, allowing unauthenticated attackers to create, query, modify, and delete jobs, potentially leading to resource exhaustion, information disclosure, and service disruption...
Duplicate
This advisory duplicates another...
CVE-2021-33473
An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows attackers to read and write arbitrary files when the verifyurl option is disabled. This vulnerability is exploited via a crafted URL...
CVE-2021-33564
An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features...
EUVD-2025-116946
Malicious code in significantdragonflyz3n npm...
Malicious code in injured_dragonfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69a4b1718322b92d918205dd95cd6c8a76f52973bc449c36000c594ee4c70bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-98078
Malicious code in illdragonflyz3n npm...
Malicious code in ill_dragonfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1066c42a7cd3f50df3172ad6f9bbf72be6f5bec6aff5b5860aa2ccbb2c48e1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-101602
Malicious code in traditionaldragonflyz3n npm...
EUVD-2025-101560
Malicious code in alivedragonflyz3n npm...
MAL-2025-124703 Malicious code in zonal_dragonfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93355df95616237b7217868bd97677e622ec9dc4432d4630d40dfc61645c4631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-95097
Malicious code in shydragonflyz3n npm...
EUVD-2025-96861
Malicious code in lazydragonflyz3n npm...
Malicious code in open_dragonfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55b4b758263dd97544f360dcb9980f9f1824c5e5d248e96683826c372618baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-105153
Malicious code in functionaldragonflyz3n npm...
EUVD-2025-88490
Malicious code in theoreticaldragonflyz3n npm...
EUVD-2025-92099
Malicious code in extraordinarydragonflyz3n npm...
Malicious code in theoretical_dragonfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d879546d055c07e358138cbc74d031647c83084075e9edaf15ffc3a93a1a85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...