Dragonfly Manager makes requests to external endpoints with disabled TLS authentication

Dragonfly has weak integrity checks for downloaded files

Dragonfly possibly panics due to nil pointer dereference when using variables created alongside an error

Timing attacks against Proxy’s basic authentication are possible

Dragonfly server-side request forgery vulnerability