VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/gravitl/netmaker: vulnerability history, versions and safety

github.com/gravitl/netmaker is a package in the Go ecosystem. Vulert records 24 vulnerabilities for it across 120 releases, from Feb 2022 to Sep 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
24 vulnerabilities recorded C1 H9 M2 U12
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
12 in the last 12 months

Most recent disclosure 28 Sep 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/gravitl/netmaker vulnerabilities

Vulert verdict on github.com/gravitl/netmaker v1.7.0 i

Updated on 23 Oct 2026

Action needed: v1.7.0 has 24 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 68/100
  • Security Unfixed issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.7.0 — affected i
  • Vulnerabilities on record 24 over 4 years · 12 in the last year i
  • Latest disclosure 28 Sep 2026 i
  • Highest CVSS 8.8 i
  • With no published fix 0 i
  • Stars 11,832 i
  • OpenSSF scorecard 5/10 i
  • Last release 1 month ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/gravitl/netmaker, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.7.1-0.20261020095559-f66de90fe2d9 20 Oct 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20261019104936-716982291b50 19 Oct 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20261017055216-c5b3ecc3bd12 17 Oct 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20261017054840-3f6e3751fc5a 17 Oct 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20261016204356-71d0bb2e1784 16 Oct 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20261015141901-7c77a6411513 15 Oct 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20261009092457-c83ee636e274 09 Oct 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20261004121637-dbb9cec8e917 04 Oct 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20261004114612-284a04d6c622 04 Oct 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20261004114255-40bc23e36a09 04 Oct 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20261001172512-aa9879738f68 01 Oct 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v0.0.0-20260923102249-401953a12179 23 Sep 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20260923102249-401953a12179 23 Sep 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20260923084228-e82365b8b1a1 23 Sep 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20260918090820-c13cbcc9c408 18 Sep 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20260917115300-fa1416b6bba1 17 Sep 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20260914085654-13be4cf6db9c 14 Sep 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20260910085640-35d029d02cda 10 Sep 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20260909142940-1bbd4274b411 09 Sep 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20260909104245-65e96387229f 09 Sep 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20260907184350-54b1870ec18e 07 Sep 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.1-0.20260903094030-959c5b01cb88 03 Sep 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.7.0 31 Aug 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260827182050-881c9d120d0d 27 Aug 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260824125956-b9b928d15a37 24 Aug 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260820064322-f1eab2701cc4 20 Aug 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260820052330-dbc4ab73456d 20 Aug 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260819162231-048bca951dfa 19 Aug 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260819140808-98c557bab668 19 Aug 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260818145703-b9d1a2fb56a3 18 Aug 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260818105210-c178a617f879 18 Aug 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260810132940-f81fe29d4d6a 10 Aug 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260807044727-4530fb0658d1 07 Aug 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260730051954-28cbda317089 30 Jul 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260730045355-339fdc8fa192 30 Jul 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260729121130-ed5a96a091f2 29 Jul 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260728084201-cb6b8fddafca 28 Jul 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260728063303-acb970b16018 28 Jul 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260727164500-af09261decce 27 Jul 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260724131718-c6a93b895ed2 24 Jul 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260715052756-a780e6505f5f 15 Jul 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260715043713-994f8164cc68 15 Jul 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260714164712-5cdc812e9504 14 Jul 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260714164509-7106cb85c47a 14 Jul 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260714161458-ecb8fe398cb0 14 Jul 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260708100551-6d841de0f613 08 Jul 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260629033704-5930c525a624 29 Jun 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260622044702-f8c764fa4936 22 Jun 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260618055954-43bc37254d7f 18 Jun 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.1-0.20260615115423-8c71fcbb31aa 15 Jun 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.6.0 12 Jun 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260612030258-57f4076ac06a 12 Jun 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260606055337-79ccbfbc939e 06 Jun 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260602065525-0f25e814e386 02 Jun 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260601131500-3bd7666aa461 01 Jun 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260601093845-006dfdced61c 01 Jun 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260601081057-316df944e0e8 01 Jun 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260531031124-20060c100071 31 May 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260522101710-420ad981312e 22 May 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260521182620-bc618a9533e0 21 May 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260521173550-38a0f2c5cc1b 21 May 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260521030310-fb0f0ba3cf03 21 May 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260515175015-282d7e8072f0 15 May 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260515164025-4be236777451 15 May 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260505191939-059fded1c370 05 May 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260430093427-575d44f4e0d7 30 Apr 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.2-0.20260406054623-55c2d19c30f7 06 Apr 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1 31 Mar 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1-0.20260323061422-81398cdd4408 23 Mar 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1-0.20260317185529-dfb6c4171f7b 17 Mar 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1-0.20260313043205-fac047399757 13 Mar 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1-0.20260309081322-3a4419793fc4 09 Mar 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1-0.20260304061827-8de81263c07c 04 Mar 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1-0.20260303124234-0c4d431df2b5 03 Mar 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1-0.20260225200227-c23a7b9ea1b6 25 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1-0.20260225195456-168ef57faf29 25 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1-0.20260224144440-0a76d6ce756f 24 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1-0.20260223100047-582d9b97daaa 23 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1-0.20260223095428-d64f1c16389e 23 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260223090338-eb49016e5ef0 23 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260223084020-6bf86205ee40 23 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1-0.20260223080133-6ad4d77d65dc 23 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.1-0.20260217111637-15f050ff6cfb 17 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.5.0 11 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260211060328-9b4f9a4a5063 11 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260210171355-b935e3795a94 10 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260204170812-b764da78185f 04 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260204090212-9faa23a20467 04 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260202101449-f723fc520210 02 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260202100153-25810d588d6c 02 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260202100104-721d823ba1d4 02 Feb 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260129104327-c7ecb55c3605 29 Jan 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260128050551-d476e79278c1 28 Jan 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260123161954-3e715dd065ce 23 Jan 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260123074204-a4fabc2a8ceb 23 Jan 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260121033840-fb2ddbbefe37 21 Jan 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260117080923-e3cbf2ed52ba 17 Jan 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260115113322-6f9e52258b83 15 Jan 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260115095823-1a7fb3b5b996 15 Jan 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260111091731-7a13398c2506 11 Jan 2026 C1 H9 M2 U12 Apache-2.0 Yes Details →
v1.4.1-0.20260108052718-c0852e32d3ba 08 Jan 2026 C1 H9 M2 U12 — Yes Details →
v1.4.1-0.20260106165716-7338ec3f438d 06 Jan 2026 C1 H9 M2 U12 — Yes Details →
v1.4.1-0.20260105121208-8053e9502173 05 Jan 2026 C1 H9 M2 U12 — Yes Details →
v1.4.1-0.20260104164838-48ab93bdb532 04 Jan 2026 C1 H9 M2 U12 — Yes Details →
v1.4.0 22 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251220081454-38d431cb1a0f 20 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251220075405-afcca556c3b2 20 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251213112123-36a88544af69 13 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251212101200-a4981ffd26c4 12 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251211070457-6d0f78401222 11 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251210105843-b5f2144b057d 10 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251209215519-9bcf203f0db0 09 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251209210531-2cc247969bf2 09 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251209181726-db2f005ea034 09 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251209140414-9d69271454f5 09 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251209074533-9dd3dfcef1e7 09 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251207170513-34b212d76521 07 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251207165352-e2a40d659598 07 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251207164834-1540a825d863 07 Dec 2025 C1 H9 M2 U12 — Yes Details →
v1.2.1-0.20251205110124-0a2e787bf8b2 05 Dec 2025 C1 H9 M2 U12 — Yes Details →

The newest 120 of 917 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 3
  • 2023 3
  • 2024 6
  • 2026 12

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 12 of the 24 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/gravitl/netmaker

The 5 most severe of 24 vulnerabilities recorded for this package

Search all 24 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2022-0664: Hard-coded Cryptographic Key in Netmaker 8.8 high 0.8.5 19 Feb 2022
CVE-2022-36110: Netmaker Insufficient Granularity of Access Control 8.8 high 0.15.1 15 Sep 2022
CVE-2023-32079: Netmaker Privilege Escalation Vulnerability 8.8 high 0.17.1 25 Aug 2023
CVE-2026-29771: Netmaker Denial of Service Vulnerability via Server Shutdown Endpoint 8.7 high 1.2.0 04 Mar 2026
CVE-2026-29196: Netmaker Vulnerability Allows Unauthorized Access to WireGuard Private Keys 8.7 high 1.5.0 09 Mar 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/gravitl/netmaker

Is github.com/gravitl/netmaker safe to use?

Vulert records 24 vulnerabilities for github.com/gravitl/netmaker in Go: 1 critical, 9 high, 2 medium and 0 low, plus 12 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/gravitl/netmaker's Vulert package health score?

Vulert scores github.com/gravitl/netmaker 68/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/gravitl/netmaker affected?

Yes. v1.7.0, the version you would install today, has 24 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/gravitl/netmaker should I use?

v1.7.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/gravitl/netmaker have?

24 vulnerabilities are recorded for github.com/gravitl/netmaker in the Go ecosystem: 1 critical, 9 high, 2 medium and 0 low, plus 12 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/gravitl/netmaker vulnerabilities disclosed?

12 vulnerabilities were recorded for github.com/gravitl/netmaker in the last 12 months, and the oldest entry in this database dates to 19 Feb 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/gravitl/netmaker are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/gravitl/netmaker for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/gravitl/netmaker version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.