VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/btcsuite/btcd: vulnerability history, versions and safety

github.com/btcsuite/btcd is a package in the Go ecosystem. Vulert records 7 vulnerabilities for it across 120 releases, from Nov 2022 to Oct 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
7 vulnerabilities recorded C1 H1 M1 U4
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/btcsuite/btcd vulnerabilities

Vulert verdict on github.com/btcsuite/btcd v0.27.0 i

Updated on 23 Oct 2026

Action needed: v0.27.0 has 7 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 84/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.27.0 — affected i
  • Vulnerabilities on record 7 over 1 year · 0 in the last year i
  • Latest disclosure 15 Oct 2024 i
  • Highest CVSS 9.8 i
  • With no published fix 0 i
  • Stars 6,714 i
  • OpenSSF scorecard 6/10 i
  • Last release this month i
  • Licence ISC i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/btcsuite/btcd, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.27.0 21 Oct 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.3-0.20261012225340-c615bd70971a 12 Oct 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.3-0.20261009012522-bbeb9d410b43 09 Oct 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.3-0.20261009010406-6c52a01987c4 09 Oct 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.3-0.20260916192307-b48125d0a356 16 Sep 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.3-0.20260911012705-a3f203843cd9 11 Sep 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.3-0.20260909014250-ca0bb02cf2a8 09 Sep 2026 C1 H1 M1 U4 ISC Yes Details →
v0.0.0-20260810122635-f4cc1dec8a61 10 Aug 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.1-0.20260810122635-f4cc1dec8a61 10 Aug 2026 C1 H1 M1 U4 ISC Yes Details →
v0.0.0-20260724234630-05585e037ba0 24 Jul 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.2 24 Jul 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.1-beta.rc1 22 Jul 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.1-0.20260720235227-e454fa77622a 20 Jul 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.1-0.20260720215743-93518d198dfc 20 Jul 2026 C1 H1 M1 U4 ISC Yes Details →
v0.0.0-20260717015332-484d39e6b0ae 17 Jul 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.1-0.20260717015332-484d39e6b0ae 17 Jul 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.1-0.20260701231425-6cfd7172ea48 01 Jul 2026 C1 H1 M1 U4 ISC Yes Details →
v0.0.0-20260626171737-934349f12d43 26 Jun 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.0 18 Jun 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.0-beta.rc1.0.20260617181057-9dcdd4814b0d 17 Jun 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260617155916-de3d460e7626 17 Jun 2026 C1 H1 M1 U4 ISC Yes Details →
v0.0.0-20260604071853-1966c384533d 04 Jun 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.0-beta.rc1.0.20260604071853-1966c384533d 04 Jun 2026 C1 H1 M1 U4 ISC Yes Details →
v0.26.0-beta.rc1 15 May 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260515022506-fdad1fab1f6e 15 May 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260515010053-e9ec6ec506f7 15 May 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260515005618-bf8006d8e76d 15 May 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260515004443-44d51eb043ec 15 May 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260515000220-e59dfeb949bb 15 May 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260514234738-90540b821ed8 14 May 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260512220456-aacc9882caa5 12 May 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260512175634-939b9394dc6b 12 May 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260430191626-c794769dc23f 30 Apr 2026 C1 H1 M1 U4 ISC Yes Details →
v0.0.0-20260408234944-51e9b53c785d 08 Apr 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260408234944-51e9b53c785d 08 Apr 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260331231816-dd78e0927637 31 Mar 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260331124549-14e32c216d37 31 Mar 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260325232822-c47cb8aae010 25 Mar 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260325004650-6b04a0b49498 25 Mar 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260324010452-b950e5b1af6a 24 Mar 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260310163610-1c55c7c18179 10 Mar 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260310001727-cac334b6aa0d 10 Mar 2026 C1 H1 M1 U4 ISC Yes Details →
v0.0.0-20260113023413-3eacced04e54 13 Jan 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20260113023413-3eacced04e54 13 Jan 2026 C1 H1 M1 U4 ISC Yes Details →
v0.25.0-beta.rc1.0.20251211001741-2ee309b7d2c2 11 Dec 2025 C1 H1 M1 U4 ISC Yes Details →
v0.25.1-0.20251106010755-9ff0780da683 06 Nov 2025 C1 H1 M1 U4 ISC Yes Details →
v0.25.0 04 Nov 2025 C1 H1 M1 U4 ISC Yes Details →
v0.0.0-20251027230257-442ef28bcf03 27 Oct 2025 C1 H1 M1 U4 ISC Yes Details →
v0.25.0-beta.rc1.0.20251027230257-442ef28bcf03 27 Oct 2025 C1 H1 M1 U4 ISC Yes Details →
v0.0.0-20250925015248-b7d070601def 25 Sep 2025 C1 H1 M1 U4 ISC Yes Details →
v0.25.0-beta.rc1.0.20250925015248-b7d070601def 25 Sep 2025 C1 H1 M1 U4 ISC Yes Details →
v0.0.0-20250820175347-e8097a1b044c 20 Aug 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250820175347-e8097a1b044c 20 Aug 2025 C1 H1 M1 U4 ISC Yes Details →
v0.25.0-beta.rc1 20 Aug 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250820063314-a4ddae2ba1b6 20 Aug 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250820010943-c002ea3196bc 20 Aug 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250728230003-baebb836c2d4 28 Jul 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250722214928-7b7644ca81f7 22 Jul 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250716123444-ab068f48b699 16 Jul 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250714021705-9adca7479d4a 14 Jul 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250711193856-4530538f8c6b 11 Jul 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250710064128-fa8d919dd04e 10 Jul 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.1-0.20250703063703-2c9907c38768 03 Jul 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250703063703-2c9907c38768 03 Jul 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250702225828-1d9a130076e5 02 Jul 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250625085533-1827fcf2f543 25 Jun 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250623120333-3913a72e2eaa 23 Jun 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250619012301-3afc25bed2bb 19 Jun 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250606230206-ac58f6984cec 06 Jun 2025 C1 H1 M1 U4 ISC Yes Details →
v0.0.0-20250606224407-7716758a8377 06 Jun 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250606224407-7716758a8377 06 Jun 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250603234436-253c36dd2729 03 Jun 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250524011930-410db6b5d04d 24 May 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250506233109-1eb974aab6ef 06 May 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250407183411-cd05d9ad3d05 07 Apr 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250404080353-990d9528d73b 04 Apr 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250326061358-f6aa7a83cdc1 26 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250325151213-7d6aef901378 25 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250324205351-679a31f9bc9e 24 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250324175315-06cf379174e1 24 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250321234545-43a870eb9faa 21 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.0.0-20250318170759-4f4ea81776d6 18 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.2-beta.rc1.0.20250318170759-4f4ea81776d6 18 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250318170759-4f4ea81776d6 18 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250318161839-9c841eddbc27 18 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250311173052-cba88226f49d 11 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250310153434-6afce8d60872 10 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250307104530-c7191d2913c7 07 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250305234225-2a64716b1c16 05 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250304230422-dc88df9a3cfd 04 Mar 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250213152832-bb52d7d78d9c 13 Feb 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250213023607-aa58ce24b9de 13 Feb 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250211081835-380c66b11bb2 11 Feb 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250210073715-ca8059b59d21 10 Feb 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250116070926-aace7a9d0f77 16 Jan 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250114202950-09ba026580f4 14 Jan 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250114020332-f3bd1f58e7c2 14 Jan 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250109133250-821114285b26 09 Jan 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20250102152037-c2b47e014983 02 Jan 2025 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20241218213809-b1b1e9551b90 18 Dec 2024 C1 H1 M1 U4 ISC Yes Details →
v0.24.3-0.20241217100614-db5318b356b9 17 Dec 2024 C1 H1 M1 U4 — Yes Details →
v0.0.0-20241210095828-e646d437e95b 10 Dec 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20241210095828-e646d437e95b 10 Dec 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20241205152707-ec0b90d2e235 05 Dec 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20241203151813-25c804f13f1e 03 Dec 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20241120202709-e9d95eed43d2 20 Nov 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20241120085051-10ef9cc04293 20 Nov 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20241106130327-684d64ad74fe 06 Nov 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20241011125836-24eb815168f4 11 Oct 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20241008130920-ee68dc66a835 08 Oct 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20241008124144-019988b69614 08 Oct 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20241008103502-e9b505dc7e1f 08 Oct 2024 C1 H1 M1 U4 — Yes Details →
v0.0.0-20240921052913-67b8efd3ba53 21 Sep 2024 C1 H1 M1 U4 — Yes Details →
v0.24.2-beta.rc1.0.20240921052913-67b8efd3ba53 21 Sep 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20240921052913-67b8efd3ba53 21 Sep 2024 C1 H1 M1 U4 — Yes Details →
v0.0.0-20240902133835-ed879eac20ec 02 Sep 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20240902133835-ed879eac20ec 02 Sep 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20240826075700-2b53ed198955 26 Aug 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20240823192254-1a1dd2a2b30b 23 Aug 2024 C1 H1 M1 U4 — Yes Details →
v0.24.3-0.20240815230351-029e5a3cb555 15 Aug 2024 C1 H1 M1 U4 — Yes Details →

The newest 120 of 907 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 3
  • 2024 4

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 7 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/btcsuite/btcd

The 5 most severe of 7 vulnerabilities recorded for this package

Search all 7 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2022-44797: btcd mishandles witness size checking 9.8 critical 0.23.2 07 Nov 2022
CVE-2024-38365: btcd Bitcoin Client Vulnerability in FindAndDelete Functionality 7.4 high 0.24.2-beta.rc1 10 Oct 2024
CVE-2022-44797: btcd mishandles witness size checking N/A unrated 0.23.2 08 Nov 2022
CVE-2022-44797: Denial of Service in message decoding in github.com/btcsuite/btcd N/A unrated 0.23.2 08 Nov 2022
CVE-2024-34478: btcd susceptible to consensus failures N/A medium 0.24.0 05 May 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/btcsuite/btcd

Is github.com/btcsuite/btcd safe to use?

Vulert records 7 vulnerabilities for github.com/btcsuite/btcd in Go: 1 critical, 1 high, 1 medium and 0 low, plus 4 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/btcsuite/btcd's Vulert package health score?

Vulert scores github.com/btcsuite/btcd 84/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/btcsuite/btcd affected?

Yes. v0.27.0, the version you would install today, has 7 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does github.com/btcsuite/btcd have?

7 vulnerabilities are recorded for github.com/btcsuite/btcd in the Go ecosystem: 1 critical, 1 high, 1 medium and 0 low, plus 4 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/btcsuite/btcd vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/btcsuite/btcd in the last 12 months, and the oldest entry in this database dates to 07 Nov 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/btcsuite/btcd are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/btcsuite/btcd for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/btcsuite/btcd version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.