VulertSecurity VulertSecurity

Vulnerability Database · Go · github.com/gravitl/netmaker · Version

github.com/gravitl/netmaker v1.4.1-0.20260121033840-fb2ddbbefe37

v1.4.1-0.20260121033840-fb2ddbbefe37 is affected by 24 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: v1.7.0.

Critical 1 High 9 Medium 2 Low 0 Unrated 12

All github.com/gravitl/netmaker versions & vulnerabilities → Source repository Search the database for this package →
Released 21 Jan 2026 Licence Apache-2.0 Also known from other sources 10 Newer releases 300 Database updated 23/Oct/2026

Release and licence data published by the Go module proxy. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

github.com/gravitl/netmaker v1.4.1-0.20260121033840-fb2ddbbefe37 vulnerabilities

24 vulnerabilities cover github.com/gravitl/netmaker v1.4.1-0.20260121033840-fb2ddbbefe37. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2023-32079: Netmaker Privilege Escalation Vulnerability 8.8 high 0.17.1 25 Aug 2023
CVE-2022-36110: Netmaker Insufficient Granularity of Access Control 8.8 high 0.15.1 15 Sep 2022
CVE-2022-0664: Hard-coded Cryptographic Key in Netmaker 8.8 high 0.8.5 19 Feb 2022
CVE-2026-29196: Netmaker Vulnerability Allows Unauthorized Access to WireGuard Private Keys 8.7 high 1.5.0 09 Mar 2026
CVE-2026-29771: Netmaker Denial of Service Vulnerability via Server Shutdown Endpoint 8.7 high 1.2.0 04 Mar 2026
CVE-2026-29194: Netmaker Insufficient Authorization in Host Token Verification 8.6 high 1.5.0 09 Mar 2026
CVE-2026-38651: Netmaker Vulnerability in JWT Signature Verification 8.2 critical 1.5.0 28 Apr 2026
CVE-2023-32078: Netmaker IDOR Allows User to Update Other User's Password 7.5 high 0.17.1 25 Aug 2023
CVE-2023-32077: Hardcoded DNS Secret Key in Netmaker 7.5 high 0.17.1 25 Aug 2023
CVE-2022-23650: Hard-coded Cryptographic Key in Netmaker 7.2 high 0.8.5 22 Feb 2022
CVE-2026-29195: Privilege Escalation in Netmaker from Admin to Super-Admin 6.9 medium 1.5.0 09 Mar 2026
CVE-2026-32599: Netmaker SQL Injection Vulnerability in SQLite Backend 5.3 medium 1.5.0 15 Sep 2026
CVE-2026-32599: SQL Injection Vulnerability in Netmaker Package N/A unrated 1.5.0 28 Sep 2026
CVE-2026-38651: Netmaker Package Lacks JWT Signature Verification for Host Tokens N/A unrated 1.5.0 25 Jun 2026
CVE-2026-29196: Netmaker Vulnerability Allows Unauthorized Access to WireGuard Private Keys N/A unrated 1.5.0 11 Mar 2026
CVE-2026-29195: Privilege Escalation in Netmaker Package N/A unrated 1.5.0 11 Mar 2026
CVE-2026-29194: Insufficient Authorization in Host Token Verification in Netmaker N/A unrated 1.5.0 11 Mar 2026
CVE-2026-29771: Denial of Service Vulnerability in Netmaker Package N/A unrated 1.2.0 10 Mar 2026
CVE-2022-36110: Insufficient Granularity of Access Control in Netmaker N/A unrated 0.15.1 21 Aug 2024
Hard-coded Cryptographic Key Vulnerability in Netmaker N/A unrated 0.8.5 21 Aug 2024
CVE-2022-23650: Hard-coded Cryptographic Key in Netmaker N/A unrated 0.8.5 21 Aug 2024
CVE-2023-32079: Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker N/A unrated 0.17.1 21 Aug 2024
CVE-2023-32078: Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker N/A unrated 0.17.1 21 Aug 2024
CVE-2023-32077: Hardcoded DNS Secret Key in github.com/gravitl/netmaker N/A unrated 0.17.1 21 Aug 2024

Looking for another version, or everything Vulert holds for github.com/gravitl/netmaker?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/gravitl/netmaker v1.4.1-0.20260121033840-fb2ddbbefe37

Is github.com/gravitl/netmaker v1.4.1-0.20260121033840-fb2ddbbefe37 vulnerable?

Yes. 24 vulnerabilities in the Vulert database cover github.com/gravitl/netmaker v1.4.1-0.20260121033840-fb2ddbbefe37: 1 critical, 9 high, 2 medium and 0 low, plus 12 not yet rated. The upgrade Vulert recommends is v1.7.0, and each entry above names the fixed version to move to.

Which version of github.com/gravitl/netmaker should I use instead of v1.4.1-0.20260121033840-fb2ddbbefe37?

v1.7.0 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.

Is v1.4.1-0.20260121033840-fb2ddbbefe37 the latest release of github.com/gravitl/netmaker?

No. v1.4.1-0.20260121033840-fb2ddbbefe37 was published 21 Jan 2026, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.

How do I monitor github.com/gravitl/netmaker for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/gravitl/netmaker version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.