https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-24124.htmlhttps://patchthecve.com/cve/CVE-2026-24124.htmlWed, 17 Jun 2026 10:22:40 +0000CRITICAL 9.8: Dragonfly is an open source P2P-based file distribution and image acceleration system. In versions 2.4.1-rc.0 and below, the Job API endpoints (/api/v1/jobs) lack JWT authentication middleware and RBAC authorization checks in the routing configuration. This allows any unauthenticated user with acceshttps://patchthecve.com/cve/CVE-2025-26269.htmlhttps://patchthecve.com/cve/CVE-2025-26269.htmlWed, 17 Jun 2026 09:01:33 +0000LOW 3.3: DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library command that references a large negative integer.https://patchthecve.com/cve/CVE-2025-26268.htmlhttps://patchthecve.com/cve/CVE-2025-26268.htmlWed, 17 Jun 2026 09:01:33 +0000LOW 3.3: DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not checked.https://patchthecve.com/cve/CVE-2023-27584.htmlhttps://patchthecve.com/cve/CVE-2023-27584.htmlWed, 17 Jun 2026 05:45:31 +0000CRITICAL 9.8: Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation (CNCF) as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to authenti