Vulnerability Database · Go · Package report
github.com/weaveworks/weave: vulnerability history, versions and safety
github.com/weaveworks/weave is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from May 2021 to Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/weaveworks/weave v2.6.5+incompatible i
Updated on 23 Oct 2026
Action needed: v2.6.5+incompatible has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.
- Security Minor issues
- Maintenance Slowing
- Popularity Key ecosystem project
- Community Quiet
What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →
- Current release v2.6.5+incompatible — affected i
- Vulnerabilities on record 2 over 3 years · 0 in the last year i
- Latest disclosure 21 Aug 2024 i
- Highest CVSS 5.8 i
- With no published fix 0 i
- Stars 6,606 i
- OpenSSF scorecard 2/10 i
- Last release 76 months ago i
- Licence Apache-2.0 i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/weaveworks/weave, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v1.9.9-0.20221123104002-8c8476381d48 23 Nov 2022
- v1.9.9-0.20220609122521-6d7a29ade6e1 09 Jun 2022
- v1.9.9-0.20220609114606-1686ded5d52c 09 Jun 2022
- v1.9.9-0.20220608051939-9a5e1e333dc2 08 Jun 2022
- v1.9.9-0.20210901124427-e3712152d2a0 01 Sep 2021
- v1.9.9-0.20210831094302-53b12b6c23d1 31 Aug 2021
- v1.9.9-0.20210713141837-5367e0efb191 13 Jul 2021
- v1.9.9-0.20210617091418-77445d0d9e63 17 Jun 2021
- v1.9.9-0.20210208164445-34de0b10a69c 08 Feb 2021
- v2.6.5-0.20210208131940-344a4835e55a+incompatible 08 Feb 2021
- v0.0.0-20210125105530-ba64f8e8eb1f 25 Jan 2021
- v1.9.9-0.20210125105530-ba64f8e8eb1f 25 Jan 2021
- v1.9.9-0.20210122142116-263aecf4efbc 22 Jan 2021
- v1.9.9-0.20210122125008-f9239c9a44df 22 Jan 2021
- v1.9.9-0.20210121180026-9a2682671cf9 21 Jan 2021
- v1.9.9-0.20210119172247-ad621c807e2b 19 Jan 2021
- v1.9.9-0.20210118145121-164175160a35 18 Jan 2021
- v1.9.9-0.20210118144142-edd28ab4cbef 18 Jan 2021
- v1.9.9-0.20210118144057-4368dd5841bf 18 Jan 2021
- v1.9.9-0.20210118140943-1dfe1f3b9824 18 Jan 2021
- v1.9.9-0.20210118140919-b1651c322abc 18 Jan 2021
- v1.9.9-0.20210118135239-ba6741166d86 18 Jan 2021
- v1.9.9-0.20210118133158-108f0a5c1408 18 Jan 2021
- v1.9.9-0.20210118123626-b04217d8e6f2 18 Jan 2021
- v1.9.9-0.20210118123354-3ef97f0c7c69 18 Jan 2021
- v1.9.9-0.20210114121025-e91900cc9e28 14 Jan 2021
- v1.9.9-0.20210112155312-fe61992c0675 12 Jan 2021
- v1.9.9-0.20210111175443-8eeb3ca4f2cb 11 Jan 2021
- v1.9.9-0.20210111143409-b7a9947c2fab 11 Jan 2021
- v1.9.9-0.20201217165342-d81e908d1a4a 17 Dec 2020
- v1.9.9-0.20201217124927-a0ac81b3b4ca 17 Dec 2020
- v1.9.9-0.20201217124927-c6d0d140a41e 17 Dec 2020
- v1.9.9-0.20201217115207-9bb14662e556 17 Dec 2020
- v1.9.9-0.20201217112146-240d1b2f2a12 17 Dec 2020
- v1.9.9-0.20200827152004-414cbfb838fc 27 Aug 2020
- v1.9.9-0.20200827151216-fb7fc7ddae20 27 Aug 2020
- v1.9.9-0.20200826100232-8c52698222c4 26 Aug 2020
- v1.9.9-0.20200824132352-cb2e56fc443c 24 Aug 2020
- v1.9.9-0.20200805103813-30ce219794fc 05 Aug 2020
- v1.9.9-0.20200805103549-911f506b63a4 05 Aug 2020
- v1.9.9-0.20200805094520-4795ba58077c 05 Aug 2020
- v1.9.9-0.20200805094419-23a827088b12 05 Aug 2020
- v1.9.9-0.20200805094002-269786abf51b 05 Aug 2020
- v1.9.9-0.20200804172540-9cf4104de7bd 04 Aug 2020
- v2.6.6-0.20200804164216-5f27dbf17c4b+incompatible 04 Aug 2020
- v2.6.6-0.20200804162130-0ab2d08f0c88+incompatible 04 Aug 2020
- v2.6.6-0.20200804162130-4d7e9931f96b+incompatible 04 Aug 2020
- v2.6.6-0.20200804162130-fca23f805a4d+incompatible 04 Aug 2020
- v2.6.6-0.20200804154310-905ec927a3de+incompatible 04 Aug 2020
- v1.9.9-0.20200804101130-2864d1ebc55d 04 Aug 2020
- v1.9.9-0.20200804101130-b3d387fb865c 04 Aug 2020
- v1.9.9-0.20200804101128-d14502e07181 04 Aug 2020
- v1.9.9-0.20200804101127-9439606c571b 04 Aug 2020
- v1.9.9-0.20200804101127-feb05c0904d8 04 Aug 2020
- v2.6.6-0.20200804101127-514695e127cc+incompatible 04 Aug 2020
- v2.6.6-0.20200803123231-f9e27f76d6c9+incompatible 03 Aug 2020
- v2.6.6-0.20200803104213-c3504788a003+incompatible 03 Aug 2020
- v2.6.6-0.20200803104016-4592758e48da+incompatible 03 Aug 2020
- v2.6.6-0.20200802154212-2ec3e1ef1a30+incompatible 02 Aug 2020
- v2.6.6-0.20200802130617-078967034450+incompatible 02 Aug 2020
- v2.6.6-0.20200731170413-80a80816aaee+incompatible 31 Jul 2020
- v2.6.6-0.20200731162941-aa9caab1b0e0+incompatible 31 Jul 2020
- v2.6.6-0.20200731162941-c50b3380eaa5+incompatible 31 Jul 2020
- v2.6.6-0.20200731162941-ce9d05e0bdc2+incompatible 31 Jul 2020
- v2.6.6-0.20200731162902-0c4aeb3a0b21+incompatible 31 Jul 2020
- v2.6.6-0.20200731162852-f24cf798bc05+incompatible 31 Jul 2020
- v2.6.6-0.20200731145246-3d66dcd94ef5+incompatible 31 Jul 2020
- v2.6.6-0.20200731145246-fab09693b91a+incompatible 31 Jul 2020
- v2.6.6-0.20200731124741-cdbc25d46296+incompatible 31 Jul 2020
- v2.6.6-0.20200731123027-6946731fddf0+incompatible 31 Jul 2020
- v2.6.6-0.20200731120221-0078fc535a5d+incompatible 31 Jul 2020
- v2.6.6-0.20200731115920-5b2311bb459b+incompatible 31 Jul 2020
- v2.6.6-0.20200731115920-9ffd0e3450e6+incompatible 31 Jul 2020
- v2.6.6-0.20200731115856-b0274e11be4c+incompatible 31 Jul 2020
- v2.6.6-0.20200731102855-28e482af1462+incompatible 31 Jul 2020
- v2.6.6-0.20200731102855-34dc4dabce47+incompatible 31 Jul 2020
- v2.6.6-0.20200731090327-00bc020498ff+incompatible 31 Jul 2020
- v2.6.6-0.20200731090327-c19762468904+incompatible 31 Jul 2020
- v2.6.6-0.20200731090327-df52117bfa24+incompatible 31 Jul 2020
- v2.6.6-0.20200730131449-00623be8a740+incompatible 30 Jul 2020
- v2.6.6-0.20200730131347-4d3e8d4a829f+incompatible 30 Jul 2020
- v2.6.6-0.20200730110733-2cc5c635c9bc+incompatible 30 Jul 2020
- v2.6.6-0.20200730102514-865e2b726f02+incompatible 30 Jul 2020
- v2.6.6-0.20200730102514-f6a3af4a100c+incompatible 30 Jul 2020
- v2.6.6-0.20200730102438-2deb7e2e48ed+incompatible 30 Jul 2020
- v2.6.6-0.20200729162536-ce38141e5b35+incompatible 29 Jul 2020
- v2.6.6-0.20200729130835-6bc656d66c5c+incompatible 29 Jul 2020
- v2.6.6-0.20200729130835-ca4f93d0d77a+incompatible 29 Jul 2020
- v2.6.6-0.20200729125546-a3c76e141b76+incompatible 29 Jul 2020
- v2.6.6-0.20200728084649-f4009c39d85f+incompatible 28 Jul 2020
- v2.6.6-0.20200727174411-9928ddb401a7+incompatible 27 Jul 2020
- v2.6.6-0.20200724133347-7b927a7bac8d+incompatible 24 Jul 2020
- v2.6.6-0.20200724130428-341bac996833+incompatible 24 Jul 2020
- v2.6.6-0.20200724130145-1d7ca17c3ecc+incompatible 24 Jul 2020
- v2.6.6-0.20200717055045-add109a63d64+incompatible 17 Jul 2020
- v2.6.6-0.20200717054553-0f276a4d63ab+incompatible 17 Jul 2020
- v2.6.6-0.20200716191111-0ac333b91cc3+incompatible 16 Jul 2020
- v2.6.6-0.20200715113428-acbd744372f5+incompatible 15 Jul 2020
- v2.6.6-0.20200715093753-709b434f55ee+incompatible 15 Jul 2020
- v2.6.6-0.20200715093753-899490c3f9b6+incompatible 15 Jul 2020
- v2.6.6-0.20200715093753-c0e50082027e+incompatible 15 Jul 2020
- v2.6.6-0.20200715093753-ca7103d0075c+incompatible 15 Jul 2020
- v2.6.6-0.20200715093716-66eb80d8416f+incompatible 15 Jul 2020
- v2.6.6-0.20200715093541-94e75e45af82+incompatible 15 Jul 2020
- v2.6.6-0.20200714151537-fa5e032e495b+incompatible 14 Jul 2020
- v2.6.6-0.20200617170313-a90c0075c8cb+incompatible 17 Jun 2020
- v2.6.6-0.20200610171514-1ff09fd4d1c5+incompatible 10 Jun 2020
- v2.6.5+incompatible 10 Jun 2020
- v2.6.5-0.20200610130741-495bea889061+incompatible 10 Jun 2020
- v2.6.5-0.20200604175353-88799b36b23a+incompatible 04 Jun 2020
- v2.6.5-0.20200604174728-3d79b07dbacf+incompatible 04 Jun 2020
- v2.6.5-0.20200604174618-27f8f9092fa3+incompatible 04 Jun 2020
- v2.6.5-0.20200604161238-7174738d9db6+incompatible 04 Jun 2020
- v2.6.5-0.20200530121346-11d75b27a6a3+incompatible 30 May 2020
- v2.6.5-0.20200530121328-9be65b466be0+incompatible 30 May 2020
- v2.6.4+incompatible 30 May 2020
- v2.6.4-0.20200530100713-bef50d3730f3+incompatible 30 May 2020
- v2.6.4-0.20200529195933-9d669c33128b+incompatible 29 May 2020
- v2.6.4-0.20200529195913-d45579bf82f4+incompatible 29 May 2020
- v2.6.4-0.20200529195841-a46d18da0cf9+incompatible 29 May 2020
The newest 120 of 7,300 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.
03 Vulnerabilities
Recorded vulnerabilities for github.com/weaveworks/weave
| Vulnerability | Severity | Fixed version ↓ | Disclosed ↓ |
|---|---|---|---|
| CVE-2020-11091: Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements | 5.8 medium | 2.6.3 | 27 May 2021 |
| CVE-2020-11091: Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements | N/A unrated | 2.6.3+incompatible | 21 Aug 2024 |
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
