CVE-2025-59351

Name of the Vulnerable Software and Affected Versions Dragonfly versions prior to 2.1.0

Description Dragonfly is a P2P-based file distribution and image acceleration system. Prior to version 2.1.0, the first return value of a function is dereferenced even when the function returns an error, potentially resulting in a nil dereference and causing the code to panic. This issue was identified in the server.Download method where a malicious actor could cause the system to panic by sending a dfdaemonv1.DownRequest request.

Recommendations Upgrade to version 2.1.0 or later.