{"action":"Upgrade github.com/gravitl/netmaker to 0.17.1 or later.","affected":[{"fixed":"0.17.1","introduced":"0"},{"fixed":"0.18.6","introduced":"0.18.0"}],"component":"github.com/gravitl/netmaker","cve_ids":["CVE-2023-32077"],"ecosystem":"Go","epss":0.03534,"exploited":false,"fixed_versions":["0.17.1","0.18.6"],"ghsa_id":"GHSA-8x8h-hcq8-jwwx","id":"tcs_01M5KG00THZPJ5D2YZGZ0ZTMY9","modified_at":"2026-03-03T04:55:07.859527Z","published_at":"2024-08-21T14:17:52Z","references":["https://osv.dev/vulnerability/GO-2023-2022","https://github.com/gravitl/netmaker/security/advisories/GHSA-8x8h-hcq8-jwwx","https://nvd.nist.gov/vuln/detail/CVE-2023-32077","https://github.com/gravitl/netmaker/commit/1621c27c1d176b639e9768b2acad7693e387fd51","https://github.com/gravitl/netmaker/commit/9362c39a9a822f0e07361aa7c77af2610597e657","https://github.com/gravitl/netmaker/pull/2170"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-2022","url":"https://osv.dev/vulnerability/GO-2023-2022"}],"summary":"Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker"}