Is github.com/lightningnetwork/lnd safe to use?

github.com/lightningnetwork/lnd has 6 known vulnerabilities on the latest version (v0.21.0-beta.rc1). DepScope rates its health at 57/100 (high risk).

What is the latest version of github.com/lightningnetwork/lnd?

The latest version of github.com/lightningnetwork/lnd is v0.21.0-beta.rc1, released 2026-04-17.

Does github.com/lightningnetwork/lnd have known vulnerabilities?

Yes. github.com/lightningnetwork/lnd has 6 known vulnerabilities. See depscope.dev/pkg/go/github.com/lightningnetwork/lnd for details.

Is github.com/lightningnetwork/lnd deprecated?

No, github.com/lightningnetwork/lnd is actively maintained. Latest release: v0.21.0-beta.rc1 (2026-04-17).

What are alternatives to github.com/lightningnetwork/lnd?

DepScope has no curated alternatives for github.com/lightningnetwork/lnd at this time.

What license does github.com/lightningnetwork/lnd use?

github.com/lightningnetwork/lnd is licensed under MIT.

github.com/lightningnetwork/lnd

govv0.21.0-beta.rc1

Lightning Network Daemon ⚡️

License MITpermissive235 versions450 maintainers0 deps8,138 weekly dl

lightningnetwork/lnd

/ 100

Health

do not use

github.com/lightningnetwork/lnd has critical vulnerabilities — do not use

Update to >= 0.17.0-beta to fix known vulnerabilities

3 high severity vulnerabilities
1 critical vulnerabilities

Health breakdown0 – 100

25/25

maintenance

6/20

popularity

0/25

security

15/15

maturity

11/15

community

Vulnerabilities

1 critical3 high2 low

Advisories (6)

Severity	ID	Summary	Fixed in
critical	CVE-2022-44797	btcd mishandles witness size checking	0.15.2-beta
high	CVE-2019-12999	Improper Access Control in Lightning Network Daemon	0.7.1-beta
high	CVE-2024-38359	Lightning Network Daemon (LND)'s onion processing logic leads to a denial of service	0.17.0-beta
high	CVE-2022-39389	Witness Block Parsing DoS Vulnerability	0.15.4-beta
unknown	CVE-2019-12999	Improper Access Control in Lightning Network Daemon in github.com/lightningnetwork/lnd	0.7.1-beta
unknown	CVE-2024-38359	Lightning Network Daemon (LND)'s onion processing logic leads to a denial of service in github.com/lightningnetwork/lnd	0.17.0-beta

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/lightningnetwork/lnd

Last updated · 2026-04-17T17:23:55Z