github.com/gravitl/netmaker
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 57
- Cadence
- ~28 days
- Last 12 months
- 6
Reach
- Stars
- 11.8k
Details
- First release
- Jul 14, 2021
| Version | Released | |
|---|---|---|
v1.7.0
minor
|
v1.7.0
minor
Dependencies (41)
+ 33 more |
|
v1.6.0
minor
|
v1.6.0
minor
Dependencies (44)
+ 36 more |
|
v1.5.1
patch
|
v1.5.1
patch
Dependencies (45)
+ 37 more |
|
v1.5.0
minor
|
v1.5.0
minor
Dependencies (44)
+ 36 more |
|
v1.4.0
minor
5 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev |
v1.4.0
minor
Dependencies (44)
+ 36 more |
|
v1.2.0
minor
5 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev |
v1.2.0
minor
Dependencies (39)
+ 31 more |
|
v1.1.0
major
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v1.1.0
major
Dependencies (39)
+ 31 more |
|
v1.0.0
major
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v1.0.0
major
Dependencies (38)
+ 30 more |
|
v0.99.0
minor
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.99.0
minor
Dependencies (38)
+ 30 more |
|
v0.90.0
minor
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.90.0
minor
Dependencies (32)
+ 24 more |
|
v0.30.0
minor
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.30.0
minor
Dependencies (32)
+ 24 more |
|
v0.26.0
minor
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.26.0
minor
Dependencies (30)
+ 22 more |
|
v0.25.0
minor
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.25.0
minor
Dependencies (29)
+ 21 more |
|
v0.24.3
patch
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.24.3
patch
Dependencies (29)
+ 21 more |
|
v0.24.2
patch
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.24.2
patch
Dependencies (28)
+ 20 more |
|
v0.24.1
patch
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.24.1
patch
Dependencies (28)
+ 20 more |
|
v0.24.0
minor
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.24.0
minor
Dependencies (28)
+ 20 more |
|
v0.23.0
minor
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.23.0
minor
Dependencies (28)
+ 20 more |
|
v0.22.0
minor
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.22.0
minor
Dependencies (28)
+ 20 more |
|
v0.21.2
patch
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.21.2
patch
Dependencies (29)
+ 21 more |
|
v0.21.1
patch
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.21.1
patch
Dependencies (29)
+ 21 more |
|
v0.21.0
minor
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.21.0
minor
Dependencies (29)
+ 21 more |
|
v0.20.6
patch
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.20.6
patch
Dependencies (29)
+ 21 more |
|
v0.20.4
patch
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.20.4
patch
Dependencies (29)
+ 21 more |
|
v0.20.3
minor
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.20.3
minor
Dependencies (30)
+ 22 more |
|
v0.19.0
minor
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.19.0
minor
Dependencies (30)
+ 22 more |
|
v0.18.7
patch
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.18.7
patch
Dependencies (29)
+ 21 more |
|
v0.18.6
patch
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.18.6
patch
Dependencies (29)
+ 21 more |
|
v0.18.4
patch
9 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.18.4
patch
Dependencies (29)
+ 21 more |
|
v0.18.3
patch
9 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.18.3
patch
Dependencies (30)
+ 22 more |
|
v0.18.1
patch
9 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.18.1
patch
Dependencies (29)
+ 21 more |
|
v0.18.0
minor
9 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.18.0
minor
Dependencies (29)
+ 21 more |
|
v0.17.1
patch
6 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.17.1
patch
Dependencies (31)
+ 23 more |
|
v0.17.0
minor
9 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.17.0
minor
Dependencies (31)
+ 23 more |
|
v0.16.2
patch
9 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.16.2
patch
Dependencies (30)
+ 22 more |
|
v0.16.1
patch
9 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.16.1
patch
Dependencies (30)
+ 22 more |
|
v0.16.0
minor
9 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.16.0
minor
Dependencies (30)
+ 22 more |
|
v0.15.1
minor
9 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.1
minor
Dependencies (27)
+ 19 more |
|
v0.14.5
patch
10 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.14.5
patch
Dependencies (26)
+ 18 more |
|
v0.14.3
patch
10 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.14.3
patch
Dependencies (25)
+ 17 more |
|
v0.14.1
patch
10 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.14.1
patch
Dependencies (25)
+ 17 more |
|
v0.14.0
minor
10 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.14.0
minor
Dependencies (24)
+ 16 more |
|
v0.14.1-testing
pre
10 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.14.1-testing
pre
Dependencies (24)
+ 16 more |
|
v0.13.0
minor
10 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.13.0
minor
Dependencies (24)
+ 16 more |
|
v0.12.2
patch
10 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.12.2
patch
Dependencies (23)
+ 15 more |
|
v0.12.1
patch
10 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.12.1
patch
Dependencies (23)
+ 15 more |
|
v0.12.0
minor
10 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.12.0
minor
Dependencies (23)
+ 15 more |
|
v0.11.1
patch
10 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.11.1
patch
Dependencies (23)
+ 15 more |
|
v0.11.0
minor
10 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.11.0
minor
Dependencies (22)
+ 14 more |
|
v0.9.4
patch
10 CVEs
CVE-2026-32599
GO-2026-6485
GHSA-r8cr-4f9w-7r75
Sep 28, 2026
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Sep 28, 2026 · Source: OSV.dev
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.9.4
patch
Dependencies (17)
+ 9 more |