CVE-2026-38651
2 advisories.
Go/github.com/gravitl/netmaker CVE-2026-38651: high 8.2
Netmaker does not verify JWT signatures for host tokens
Action: Upgrade github.com/gravitl/netmaker to 1.5.0 or later.
go get github.com/gravitl/netmaker@v1.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.0 | - |
Fixed versions
| 1.5.0 |
Sources
- osv: GHSA-qpv2-rwc8-c993
- https://nvd.nist.gov/vuln/detail/CVE-2026-38651
- https://github.com/gravitl/netmaker/commit/5309aa70d464ef565911369714d661a61481a79b
- https://github.com/gravitl/netmaker
- https://www.zyenra.com/advisories/netmaker-jwt-verification-bypass
CVE-2026-38651 · published · modified · JSON
Go/github.com/gravitl/netmaker CVE-2026-38651: unknown
Netmaker does not verify JWT signatures for host tokens in github.com/gravitl/netmaker
Action: Upgrade github.com/gravitl/netmaker to 1.5.0 or later.
go get github.com/gravitl/netmaker@v1.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.0 | - |
Fixed versions
| 1.5.0 |
Sources
- osv: GO-2026-5588
- https://github.com/advisories/GHSA-qpv2-rwc8-c993
- https://nvd.nist.gov/vuln/detail/CVE-2026-38651
- https://github.com/gravitl/netmaker/commit/5309aa70d464ef565911369714d661a61481a79b
- https://www.zyenra.com/advisories/netmaker-jwt-verification-bypass
CVE-2026-38651 · published · modified · JSON