Skip to main content
cve.nowby Sazabi
← Go
GoPackage

tailscale.com

3 known vulnerabilities (1 critical, 1 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 critical, 1 medium, 1 low
Registry
pkg.go.dev

Advisories 3

  • CVE-2023-28436Medium 5.7

    Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process

    Affected: from 1.34.0, fixed in 1.38.2.

  • Tailscale daemon is vulnerable to information disclosure via CSRF

    Affected: fixed in 1.32.3.

  • CVE-2022-41924Critical 9.6

    Tailscale Windows daemon is vulnerable to RCE via CSRF

    Affected: fixed in 1.32.3.