github.com/gravitl/netmaker
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
View on Github
Activity
- Latest release
- Feb 11, 2026
- Total releases
- 48
- Cadence
- ~23 days
- Last 12 months
- 4
Reach
- Stars
- 11.7k
Details
- First release
- Jul 14, 2021
| Version | Released | |
|---|---|---|
v1.5.0
minor
|
v1.5.0
minor
Dependencies (44)
+ 36 more |
|
v1.4.0
minor
4 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev |
v1.4.0
minor
Dependencies (44)
+ 36 more |
|
v1.2.0
minor
4 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev |
v1.2.0
minor
Dependencies (39)
+ 31 more |
|
v1.1.0
major
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v1.1.0
major
Dependencies (39)
+ 31 more |
|
v0.90.0
minor
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.90.0
minor
Dependencies (32)
+ 24 more |
|
v0.30.0
minor
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.30.0
minor
Dependencies (32)
+ 24 more |
|
v0.25.0
minor
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.25.0
minor
Dependencies (29)
+ 21 more |
|
v0.24.2
patch
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.24.2
patch
Dependencies (28)
+ 20 more |
|
v0.24.1
patch
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.24.1
patch
Dependencies (28)
+ 20 more |
|
v0.24.0
minor
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.24.0
minor
Dependencies (28)
+ 20 more |
|
v0.23.0
minor
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.23.0
minor
Dependencies (28)
+ 20 more |
|
v0.22.0
minor
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.22.0
minor
Dependencies (28)
+ 20 more |
|
v0.21.0
minor
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.21.0
minor
Dependencies (29)
+ 21 more |
|
v0.20.6
patch
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.20.6
patch
Dependencies (29)
+ 21 more |
|
v0.20.4
patch
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.20.4
patch
Dependencies (29)
+ 21 more |
|
v0.20.3
minor
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.20.3
minor
Dependencies (30)
+ 22 more |
|
v0.19.0
minor
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.19.0
minor
Dependencies (30)
+ 22 more |
|
v0.18.7
patch
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.18.7
patch
Dependencies (29)
+ 21 more |
|
v0.18.6
patch
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.18.6
patch
Dependencies (29)
+ 21 more |
|
v0.18.4
patch
8 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.18.4
patch
Dependencies (29)
+ 21 more |
|
v0.18.3
patch
8 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.18.3
patch
Dependencies (30)
+ 22 more |
|
v0.18.1
patch
8 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.18.1
patch
Dependencies (29)
+ 21 more |
|
v0.18.0
minor
8 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.18.0
minor
Dependencies (29)
+ 21 more |
|
v0.17.1
patch
5 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev |
v0.17.1
patch
Dependencies (31)
+ 23 more |
|
v0.17.0
minor
8 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.17.0
minor
Dependencies (31)
+ 23 more |
|
v0.16.2
patch
8 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.16.2
patch
Dependencies (30)
+ 22 more |
|
v0.16.1
patch
8 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.16.1
patch
Dependencies (30)
+ 22 more |
|
v0.16.0
minor
8 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.16.0
minor
Dependencies (30)
+ 22 more |
|
v0.15.1
minor
8 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.1
minor
Dependencies (27)
+ 19 more |
|
v0.14.5
patch
9 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.14.5
patch
Dependencies (26)
+ 18 more |
|
v0.14.3
patch
9 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.14.3
patch
Dependencies (25)
+ 17 more |
|
v0.14.1
patch
9 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.14.1
patch
Dependencies (25)
+ 17 more |
|
v0.14.0
minor
9 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.14.0
minor
Dependencies (24)
+ 16 more |
|
v0.14.1-testing
pre
9 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.14.1-testing
pre
Dependencies (24)
+ 16 more |
|
v0.13.0
minor
9 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.13.0
minor
Dependencies (24)
+ 16 more |
|
v0.12.2
patch
9 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.12.2
patch
Dependencies (23)
+ 15 more |
|
v0.12.1
patch
9 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.12.1
patch
Dependencies (23)
+ 15 more |
|
v0.12.0
minor
9 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.12.0
minor
Dependencies (23)
+ 15 more |
|
v0.11.1
patch
9 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.11.1
patch
Dependencies (23)
+ 15 more |
|
v0.11.0
minor
9 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.11.0
minor
Dependencies (22)
+ 14 more |
|
v0.9.4
patch
9 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.9.4
patch
Dependencies (17)
+ 9 more |
|
v0.9.1
patch
11 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-0664
GO-2022-0561
GHSA-6rrw-4fm9-rghv
Aug 21, 2024
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Fixed in
0.8.5
0.9.4
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-23650
GO-2022-0328
GHSA-86f3-hf24-76q4
Aug 21, 2024
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Fixed in
0.8.5
0.9.4
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.9.1
patch
Dependencies (17)
+ 9 more |
|
v0.9.0
minor
11 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-0664
GO-2022-0561
GHSA-6rrw-4fm9-rghv
Aug 21, 2024
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Fixed in
0.8.5
0.9.4
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-23650
GO-2022-0328
GHSA-86f3-hf24-76q4
Aug 21, 2024
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Fixed in
0.8.5
0.9.4
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.9.0
minor
Dependencies (17)
+ 9 more |
|
v0.8.5
patch
9 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.8.5
patch
Dependencies (17)
+ 9 more |
|
v0.8.4
patch
11 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-0664
GO-2022-0561
GHSA-6rrw-4fm9-rghv
Aug 21, 2024
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Fixed in
0.8.5
0.9.4
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-23650
GO-2022-0328
GHSA-86f3-hf24-76q4
Aug 21, 2024
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Fixed in
0.8.5
0.9.4
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.8.4
patch
Dependencies (16)
+ 8 more |
|
v0.8.2
minor
11 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-0664
GO-2022-0561
GHSA-6rrw-4fm9-rghv
Aug 21, 2024
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Fixed in
0.8.5
0.9.4
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-23650
GO-2022-0328
GHSA-86f3-hf24-76q4
Aug 21, 2024
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Fixed in
0.8.5
0.9.4
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.8.2
minor
Dependencies (15)
+ 7 more |
|
v0.7.1
minor
11 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-0664
GO-2022-0561
GHSA-6rrw-4fm9-rghv
Aug 21, 2024
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Fixed in
0.8.5
0.9.4
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-23650
GO-2022-0328
GHSA-86f3-hf24-76q4
Aug 21, 2024
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Fixed in
0.8.5
0.9.4
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.7.1
minor
Dependencies (18)
+ 10 more |
|
v0.5.10
initial
11 CVEs
CVE-2026-38651
GO-2026-5588
GHSA-qpv2-rwc8-c993
Jun 25, 2026
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29195
GO-2026-4654
GHSA-ch3w-9456-38v3
Mar 11, 2026
Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29196
GO-2026-4651
GHSA-4hgg-c4rr-6h7f
Mar 11, 2026
Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29194
GO-2026-4655
GHSA-hmqr-wjmj-376c
Mar 11, 2026
Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker Fixed in
1.5.0
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-29771
GO-2026-4608
GHSA-rhr9-hgcm-x289
Mar 10, 2026
Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint in github.com/gravitl/netmaker Fixed in
1.2.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2022-36110
GO-2022-0986
GHSA-ggf6-638m-vqmg
Aug 21, 2024
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker Fixed in
0.15.1
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-0664
GO-2022-0561
GHSA-6rrw-4fm9-rghv
Aug 21, 2024
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Fixed in
0.8.5
0.9.4
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-23650
GO-2022-0328
GHSA-86f3-hf24-76q4
Aug 21, 2024
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker Fixed in
0.8.5
0.9.4
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32078
GO-2023-2023
GHSA-256m-j5qw-38f4
Aug 21, 2024
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32077
GO-2023-2022
GHSA-8x8h-hcq8-jwwx
Aug 21, 2024
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-32079
GO-2023-2025
GHSA-826j-8wp2-4x6q
Aug 21, 2024
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker Fixed in
0.17.1
0.18.6
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.5.10
initial
Dependencies (16)
+ 8 more |