Vulnerability Database · Go · Package report

tailscale.com: vulnerability history, versions and safety

tailscale.com is a package in the Go ecosystem. Vulert records 5 vulnerabilities for it across 120 releases, from Nov 2022 to Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
5 vulnerabilities recorded C1 M1 U3
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

Vulert verdict on tailscale.com v1.104.2 i

Updated on 23 Oct 2026

Action needed: v1.104.2 has 3 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 87/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.104.2 — affected i
  • Vulnerabilities on record 5 over 1 year · 0 in the last year i
  • Latest disclosure 21 Aug 2024 i
  • Highest CVSS 9.6 i
  • With no published fix 0 i
  • Stars 37,675 i
  • OpenSSF scorecard 6/10 i
  • Last release this month i
  • Licence BSD-3-Clause i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for tailscale.com, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.105.0-pre.0.20261022145243-f8ad538a3ba0 22 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261022061721-37fc7a7a7260 22 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261021040133-ecd50ee2c190 21 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261021035959-3f236f876567 21 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261021030034-3c24529fa3b2 21 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261020191711-f32038313a74 20 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261020171948-98f7c4241ee2 20 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261020162449-47743a8b9ad1 20 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.104.2 20 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261020132111-eaf3fc8daf90 20 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261020123513-ef596ebd34c3 20 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261019223425-db03d4e19da5 19 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261019171856-374d505a99c7 19 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261017010233-e3c3ef18a51a 17 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261016175358-3cc10b9056e6 16 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261016154031-e915ebc42ab6 16 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v0.0.0-20261016010410-e9d5cdc3231e 16 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261016010410-e9d5cdc3231e 16 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261015210111-a04b6b16824b 15 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261015144530-a0a79982d427 15 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261014225612-b83f28ebfbd9 14 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261014161508-5f47f9ce49b5 14 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261014104353-fd1cc09139ba 14 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261014074300-f61c86852783 14 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261013235713-a6a4c25c26e9 13 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261013230243-bbe697b6458c 13 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261013225543-fb79793d99f5 13 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261013221809-40d0abcffb88 13 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261013202643-aaaaa971891b 13 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261013194831-5cc8aa7f07e2 13 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261013172412-4f86936ef0ec 13 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261013155112-53c39572333f 13 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261010165311-3bb8a906c277 10 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261010090523-373db59dae0c 10 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261010000241-87ec06810dc3 10 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261009224052-fbb662f23040 09 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261009210058-5b226c7d1df7 09 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261009183829-b2560c4dea99 09 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261009170545-1e3097c9f222 09 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261009161218-144f6b20f09e 09 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261009151209-b9262195b1fb 09 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261008201311-76648a00fd81 08 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261008183559-1264887365b9 08 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261008162656-417d3c00b04a 08 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261008153514-a89b32904fe5 08 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261008090424-156ff9e43961 08 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261008020149-a5ae05dd9d51 08 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261007223822-852c3d1f0a84 07 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261007222948-9c00fd033013 07 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261007190916-1eb2bb62f3c5 07 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.104.1 07 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261007163808-60f75061da79 07 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261007000947-4862f5f466e1 07 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261006215122-508d654ddbca 06 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261006201200-2a61a720e554 06 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261006155211-e28b7b57efa5 06 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261005192940-edf8abd69e1c 05 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261005182611-31baee90c079 05 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261005171423-92a64b306dac 05 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261005132214-ba6160953efc 05 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v0.0.0-20261002150351-9128778b6515 02 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261002150351-9128778b6515 02 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261002095948-3ce5e209971d 02 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261002083503-83ec9a953c07 02 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261002022239-67f8c81e610d 02 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261001223730-12e898010c51 01 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261001183516-d33279d7525c 01 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261001125720-d8c7cafeda21 01 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261001110716-689a0c155f57 01 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261001044137-b0e35bf5b56c 01 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20261001013457-5d5607fea281 01 Oct 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre.0.20260930225347-654c105f8bf0 30 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.105.0-pre 30 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.104.0 30 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260930174422-ab2380a63128 30 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260930161502-238d07c5f322 30 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260930152800-57b3d3591dae 30 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260930144213-e987d72be22f 30 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260929231157-f5f326030b8b 29 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260929224205-70422c917a68 29 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260929190708-7649cf9501f4 29 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260929161815-5758b2aa572f 29 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260929142145-a0e471a35b8f 29 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260929135500-06e3480a8541 29 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260929122948-5d35baeb8730 29 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260929034851-dca60dd77de9 29 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260928202652-b4e3a5299c6f 28 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260928185636-a40d145b21cb 28 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260928140705-48c7fbcc56db 28 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260927172042-2d4379386a5f 27 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260926215838-fe0d7d1dc512 26 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260925230348-6b3a45f14ef6 25 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260925191053-27b2a7d1a1ff 25 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260925181806-35a6fabf9d00 25 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260925165111-ec5d51098ab7 25 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260925153559-7aa70218d26e 25 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.102.5 24 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260924185624-d229a06f9a4b 24 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260924174353-9020fdcd8ae9 24 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260924010211-b1664580dc50 24 Sep 2026 C1 U2 BSD-3-Clause Yes Details →
v1.103.0-pre.0.20260923231352-9cdbc3ad3ea0 23 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260923205221-b6c6c59dde58 23 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260923200411-8d43ba67374c 23 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260923175034-02de76ba6207 23 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260923171934-a35aff28951d 23 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260923155533-7122baac1bbe 23 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260923134252-63f625397bd7 23 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260923093601-5f0cf87429dc 23 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260923014604-610b05c58e8d 23 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260922213920-8af8f861c032 22 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260922211030-b3de3b2217ba 22 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260922163650-1edf391c9c24 22 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260922132344-df0bd83055fa 22 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260921224330-ee029383f71c 21 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260921224233-816b661f0dc3 21 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260921205240-523b626a8e8f 21 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260921175652-3f3e56f4124f 21 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260921152351-bb94defdd029 21 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260921102157-7bf76690f09d 21 Sep 2026 C1 U2 — Yes Details →
v1.103.0-pre.0.20260920180204-3014ad828eff 20 Sep 2026 C1 U2 — Yes Details →

The newest 120 of 8,615 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 1
  • 2023 1
  • 2024 3

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 5 were recorded in the last 12 months.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About tailscale.com

Is tailscale.com safe to use?

Vulert records 5 vulnerabilities for tailscale.com in Go: 1 critical, 0 high, 1 medium and 0 low, plus 3 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is tailscale.com's Vulert package health score?

Vulert scores tailscale.com 87/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of tailscale.com affected?

Yes. v1.104.2, the version you would install today, has 3 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does tailscale.com have?

5 vulnerabilities are recorded for tailscale.com in the Go ecosystem: 1 critical, 0 high, 1 medium and 0 low, plus 3 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new tailscale.com vulnerabilities disclosed?

0 vulnerabilities were recorded for tailscale.com in the last 12 months, and the oldest entry in this database dates to 21 Nov 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of tailscale.com are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor tailscale.com for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the tailscale.com version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.