Affected by GO-2022-1119 and 1 other vulnerabilities

GO-2022-1119: Tailscale daemon is vulnerable to information disclosure via CSRF in tailscale.com

GO-2022-1120: Tailscale Windows daemon is vulnerable to RCE via CSRF in tailscale.com

net/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/tailscale/tailscale

Links

Open Source Insights

Directories ¶

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

Path	Synopsis
dnscache Package dnscache contains a minimal DNS cache that makes a bunch of assumptions that are only valid for us.	Package dnscache contains a minimal DNS cache that makes a bunch of assumptions that are only valid for us.
dnsfallback Package dnsfallback contains a DNS fallback mechanism for starting up Tailscale when the system DNS is broken or otherwise unavailable.	Package dnsfallback contains a DNS fallback mechanism for starting up Tailscale when the system DNS is broken or otherwise unavailable.
flowtrack Package flowtrack contains types for tracking TCP/UDP flows by 4-tuples.	Package flowtrack contains types for tracking TCP/UDP flows by 4-tuples.
interfaces Package interfaces contains helpers for looking up system network interfaces.	Package interfaces contains helpers for looking up system network interfaces.
netcheck Package netcheck checks the network conditions from the current host.	Package netcheck checks the network conditions from the current host.
netns Package netns contains the common code for using the Go net package in a logical "network namespace" to avoid routing loops where Tailscale-created packets would otherwise loop back through Tailscale routes.	Package netns contains the common code for using the Go net package in a logical "network namespace" to avoid routing loops where Tailscale-created packets would otherwise loop back through Tailscale routes.
netstat Package netstat returns the local machine's network connection table.	Package netstat returns the local machine's network connection table.
nettest
packet Package packet contains packet parsing and marshaling utilities.	Package packet contains packet parsing and marshaling utilities.
portmapper Package portmapper is a UDP port mapping client.	Package portmapper is a UDP port mapping client.
socks5 Package socks5 is a SOCKS5 server implementation for userspace networking in Tailscale.	Package socks5 is a SOCKS5 server implementation for userspace networking in Tailscale.
stun Package STUN generates STUN request packets and parses response packets.	Package STUN generates STUN request packets and parses response packets.
stuntest Package stuntest provides a STUN test server.	Package stuntest provides a STUN test server.
tlsdial Package tlsdial originally existed to set up a tls.Config for x509 validation, using a memory-optimized path for iOS, but then we moved that to the tailscale/go tree instead, so now this package does very little.	Package tlsdial originally existed to set up a tls.Config for x509 validation, using a memory-optimized path for iOS, but then we moved that to the tailscale/go tree instead, so now this package does very little.
tsaddr Package tsaddr handles Tailscale-specific IPs and ranges.	Package tsaddr handles Tailscale-specific IPs and ranges.
tshttpproxy Package tshttpproxy contains Tailscale additions to httpproxy not available in golang.org/x/net/http/httpproxy.	Package tshttpproxy contains Tailscale additions to httpproxy not available in golang.org/x/net/http/httpproxy.