PatchTheCVEdragonfly project vulnerabilities
Recent CVEs affecting dragonfly project products. 2 tracked.
dragonfly project has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-06-02. Highest priority: CVE-2021-33564 (score 69/100).
- CVE-2021-33564 CRITICAL 9.8 UPGRADE An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read
- CVE-2021-33473 CRITICAL 9.1 DOWNGRADE An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows attackers to read and write arbitrary
FAQ
How do I fix dragonfly project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dragonfly project being exploited right now?
None of the tracked dragonfly project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dragonfly project CVE should I patch first?
CVE-2021-33564 currently ranks highest (69/100): An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read.