VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/lightningnetwork/lnd: vulnerability history, versions and safety

github.com/lightningnetwork/lnd is a package in the Go ecosystem. Vulert records 5 vulnerabilities for it across 120 releases, from May 2021 to Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
5 vulnerabilities recorded H3 U2
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/lightningnetwork/lnd vulnerabilities

Vulert verdict on github.com/lightningnetwork/lnd v0.0.2 i

Updated on 23 Oct 2026

Every vulnerability Vulert records for this package has a fix, and the newest was recorded 21 Aug 2024. Apply the fixes listed below and you are clear.

Package health score 84/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Move the affected dependencies to the fixed versions listed below, then keep the package monitored so the next vulnerability reaches you. Fix it, then keep watch: Vulert alerts you when a new vulnerability affects the version you run. Monitor it with Vulert →

  • Current release v0.0.2 — unaffected i
  • Vulnerabilities on record 5 over 3 years · 0 in the last year i
  • Latest disclosure 21 Aug 2024 i
  • Highest CVSS 8.2 i
  • With no published fix 0 i
  • Stars 8,201 i
  • OpenSSF scorecard 5/10 i
  • Last release this month i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/lightningnetwork/lnd, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20261023034841-1a359d4aa1e5 23 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261023034841-1a359d4aa1e5 23 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261021170048-0d9c9d3afb27 21 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261021170048-0d9c9d3afb27 21 Oct 2026 H3 U2 MIT Yes Details →
v0.21.5-beta.rc1 21 Oct 2026 H3 U2 MIT Yes Details →
v0.20.6-beta.rc1 21 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261021010329-732a9a0c7f4c 21 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261021010329-732a9a0c7f4c 21 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261020232000-bfe5039fb5e9 20 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261020232000-bfe5039fb5e9 20 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261020182648-26b0467678d7 20 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261020182648-26b0467678d7 20 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261020165043-26becc8db967 20 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261020150603-6b7ea83095ea 20 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261020141236-216caf5a10ed 20 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261020141236-216caf5a10ed 20 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261020124513-0edf83e71e45 20 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261020124513-0edf83e71e45 20 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261020120528-878cc95e76a2 20 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261020053411-88a5b0ee0864 20 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261020053411-88a5b0ee0864 20 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261020040036-aac4e161388a 20 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261019232053-303689a8e9d7 19 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261019232053-303689a8e9d7 19 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261019174504-b5de062aec83 19 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261019174504-b5de062aec83 19 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261019050457-349e045adb27 19 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261019050457-349e045adb27 19 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261017230411-8f950521bce4 17 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261017230411-8f950521bce4 17 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261016164316-3abd5967a65e 16 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261016164316-3abd5967a65e 16 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261016124805-a804c68cc2e4 16 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261016124805-a804c68cc2e4 16 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261015210740-bbad0489418d 15 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261015210740-bbad0489418d 15 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261015174647-1f67d1ffa9c1 15 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261015174647-1f67d1ffa9c1 15 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261015104147-65c3263cb67a 15 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261015104147-65c3263cb67a 15 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261015025853-6052d0bc78af 15 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261015025853-6052d0bc78af 15 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261014102911-b0347689b0fa 14 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261014102911-b0347689b0fa 14 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261014010348-5520f5569feb 14 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261014010348-5520f5569feb 14 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261013122939-a3756272c234 13 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261013122939-a3756272c234 13 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261012235840-318292e29566 12 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261012235840-318292e29566 12 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261012184302-4ea5f8143b78 12 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261012184302-4ea5f8143b78 12 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261009235856-eb30b24d2397 09 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261009235856-eb30b24d2397 09 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261009231804-7542f418175c 09 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261009165642-a8970c6eec80 09 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261009165642-a8970c6eec80 09 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261008213419-4ab78a0e75c8 08 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261008213419-4ab78a0e75c8 08 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261008144617-a27ead091d14 08 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261008144617-a27ead091d14 08 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261007133129-c58148dd87ea 07 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261007133129-c58148dd87ea 07 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261007115253-d9a52264a705 07 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261006105224-ff38b9cbdf84 06 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261006105224-ff38b9cbdf84 06 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20261001205631-f3a8f4e8ae82 01 Oct 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20261001205631-f3a8f4e8ae82 01 Oct 2026 H3 U2 MIT Yes Details →
v0.0.0-20260930200124-69e359173e10 30 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260930200124-69e359173e10 30 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260930193059-dcc6ffd74978 30 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260930193059-dcc6ffd74978 30 Sep 2026 H3 U2 MIT Yes Details →
v0.20.5-beta 30 Sep 2026 H3 U2 MIT Yes Details →
v0.21.4-beta 30 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260930105405-f0f23ef3e9f6 30 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260930105405-f0f23ef3e9f6 30 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260930021251-95c56eeb273e 30 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260930021251-95c56eeb273e 30 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260929021738-f9872e3acf5b 29 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260929021738-f9872e3acf5b 29 Sep 2026 H3 U2 MIT Yes Details →
v0.20.5-beta.rc1 25 Sep 2026 H3 U2 MIT Yes Details →
v0.21.4-beta.rc1 25 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260925031608-f2963ce1fd19 25 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260925031608-f2963ce1fd19 25 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260924142252-ff27d5bcc4b9 24 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260924142252-ff27d5bcc4b9 24 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260924033823-112cb5f3c253 24 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260924033823-112cb5f3c253 24 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260923180422-500ca51f5460 23 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260923180422-500ca51f5460 23 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260923085259-86306f89678c 23 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260923085259-86306f89678c 23 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260922184851-2eac3317fbed 22 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260922184851-2eac3317fbed 22 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260922130445-55a3acb0d595 22 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260922130445-55a3acb0d595 22 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260922024049-d3d1f1d023aa 22 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260922024049-d3d1f1d023aa 22 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260921181145-f02cf4afbfc5 21 Sep 2026 H3 U2 MIT Yes Details →
v0.21.0-beta.rc2.0.20260921181145-f02cf4afbfc5 21 Sep 2026 H3 U2 MIT Yes Details →
v0.0.0-20260921165324-61450518a4d5 21 Sep 2026 H3 U2 — Yes Details →
v0.21.0-beta.rc2.0.20260921165324-61450518a4d5 21 Sep 2026 H3 U2 — Yes Details →
v0.0.0-20260919003839-88959aec3d7a 19 Sep 2026 H3 U2 — Yes Details →
v0.21.0-beta.rc2.0.20260919003839-88959aec3d7a 19 Sep 2026 H3 U2 — Yes Details →
v0.0.0-20260918235045-45af352658e1 18 Sep 2026 H3 U2 — Yes Details →
v0.0.0-20260918234213-ef4820e5dfa0 18 Sep 2026 H3 U2 — Yes Details →
v0.21.0-beta.rc2.0.20260918234213-ef4820e5dfa0 18 Sep 2026 H3 U2 — Yes Details →
v0.0.0-20260911160357-606321b66d5a 11 Sep 2026 H3 U2 — Yes Details →
v0.21.0-beta.rc2.0.20260911160357-606321b66d5a 11 Sep 2026 H3 U2 — Yes Details →
v0.0.0-20260910144823-32b6e2dce485 10 Sep 2026 H3 U2 — Yes Details →
v0.21.0-beta.rc2.0.20260910144823-32b6e2dce485 10 Sep 2026 H3 U2 — Yes Details →
v0.0.0-20260908145326-1049d3010a4e 08 Sep 2026 H3 U2 — Yes Details →
v0.21.0-beta.rc2.0.20260908145326-1049d3010a4e 08 Sep 2026 H3 U2 — Yes Details →
v0.0.0-20260904130445-80dde144cdcd 04 Sep 2026 H3 U2 — Yes Details →
v0.21.0-beta.rc2.0.20260904130445-80dde144cdcd 04 Sep 2026 H3 U2 — Yes Details →
v0.21.0-beta.rc2.0.20260904014041-fce0e5cfb041 04 Sep 2026 H3 U2 — Yes Details →
v0.0.0-20260903094101-d66a7c137d32 03 Sep 2026 H3 U2 — Yes Details →
v0.21.0-beta.rc2.0.20260903094101-d66a7c137d32 03 Sep 2026 H3 U2 — Yes Details →
v0.0.0-20260902193537-62b0a07399c8 02 Sep 2026 H3 U2 — Yes Details →
v0.21.0-beta.rc2.0.20260902193537-62b0a07399c8 02 Sep 2026 H3 U2 — Yes Details →

The newest 120 of 15,478 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2021 1
  • 2022 1
  • 2024 3

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 5 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/lightningnetwork/lnd

The 5 most severe of 5 vulnerabilities recorded for this package

Search all 5 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2022-39389: Witness Block Parsing DoS Vulnerability in github.com/lightningnetwork/lnd 8.2 high 0.15.4-beta 18 Nov 2022
CVE-2019-12999: Improper Access Control in Lightning Network Daemon 7.5 high 0.7.1-beta 18 May 2021
CVE-2024-38359: Denial of Service in Lightning Network Daemon (LND) 6.5 high 0.17.0-beta 20 Jun 2024
CVE-2024-38359: Denial of Service in Lightning Network Daemon (LND) N/A unrated 0.17.0-beta 01 Jul 2024
CVE-2019-12999: Improper Access Control in Lightning Network Daemon in github.com/lightningnetwork/lnd N/A unrated 0.7.1-beta 21 Aug 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/lightningnetwork/lnd

Is github.com/lightningnetwork/lnd safe to use?

Vulert records 5 vulnerabilities for github.com/lightningnetwork/lnd in Go: 0 critical, 3 high, 0 medium and 0 low, plus 2 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/lightningnetwork/lnd's Vulert package health score?

Vulert scores github.com/lightningnetwork/lnd 84/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

How many vulnerabilities does github.com/lightningnetwork/lnd have?

5 vulnerabilities are recorded for github.com/lightningnetwork/lnd in the Go ecosystem: 0 critical, 3 high, 0 medium and 0 low, plus 2 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/lightningnetwork/lnd vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/lightningnetwork/lnd in the last 12 months, and the oldest entry in this database dates to 18 May 2021. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/lightningnetwork/lnd are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/lightningnetwork/lnd for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/lightningnetwork/lnd version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.