PatchTheCVEdrogon vulnerabilities
Recent CVEs affecting drogon products. 3 tracked.
drogon has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-07-06. Highest priority: CVE-2023-26137 (score 45/100).
- CVE-2023-26138 MEDIUM 5.4 MITIGATE All versions of the package drogonframework/drogon are vulnerable to CRLF Injection when untrusted user input
- CVE-2023-26137 HIGH 7.2 MITIGATE All versions of the package drogonframework/drogon are vulnerable to HTTP Response Splitting when untrusted us
- CVE-2022-3959 LOW 3.1 UPGRADE A vulnerability, which was classified as problematic, has been found in drogon up to 1.8.1
FAQ
How do I fix drogon vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is drogon being exploited right now?
None of the tracked drogon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which drogon CVE should I patch first?
CVE-2023-26137 currently ranks highest (45/100): All versions of the package drogonframework/drogon are vulnerable to HTTP Response Splitting when untrusted us.