Количество 2
Количество 2
CVE-2025-59354
Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the DragonFly2 uses a variety of hash functions, including the MD5 hash, for downloaded files. This allows attackers to replace files with malicious ones that have a colliding hash. This vulnerability is fixed in 2.1.0.
GHSA-hx2h-vjw2-8r54
DragonFly has weak integrity checks for downloaded files
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2025-59354 Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the DragonFly2 uses a variety of hash functions, including the MD5 hash, for downloaded files. This allows attackers to replace files with malicious ones that have a colliding hash. This vulnerability is fixed in 2.1.0. | CVSS3: 5.3 | 0% Низкий | 5 месяцев назад | |
GHSA-hx2h-vjw2-8r54 DragonFly has weak integrity checks for downloaded files | 0% Низкий | 5 месяцев назад |
Уязвимостей на страницу