Gluetun VPN client

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

100% Freshness

120 Dependencies

0 Outdated

0 Stale

— Avg Behind

Dependency List

Latest release v3.41.1

All 119 Outdated 0 Has CVE 5 GPL 2

Dependency	Type	Current	Latest	Behind	CVE	License
github.com/docker/docker golang	Direct	28.5.1+incompatible	—	—	2 high	Apache-2.0
go.opentelemetry.io/otel golang	Direct	1.38.0	—	—	1 high	Apache-2.0 AND BSD-3-Clause
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp golang	Direct	1.38.0	—	—	1 medium	Apache-2.0 AND BSD-3-Clause
github.com/cloudflare/circl golang	Transitive	v1.6.1	—	—	1 low	BSD-3-Clause
golang.org/x/net golang	Direct	v0.51.0	—	—	1 unknown	BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang

License Breakdown

MIT 27

Unknown 25

Apache-2.0 24

BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang 16

Apache-2.0 AND BSD-3-Clause 10

BSD-3-Clause 7

(BSD-3-Clause AND GPL-1.0-or-later AND GPL-2.0 AND GPL-2.0-only AND GPL-2.0-or-later) OR (BSD-3-Clause AND GPL-1.0-or-later AND GPL-2.0 AND GPL-2.0-only) 2

BSD-3-Clause AND MIT 2

Apache-2.0 AND BSD-3-Clause AND MIT 1

Apache-2.0 AND CC-BY-SA-4.0 1

Apache-2.0 AND LicenseRef-scancode-dco-1.1 AND MIT 1

BSD-2-Clause 1

ISC 1

LicenseRef-scancode-unknown-license-reference AND MIT 1

CVE Severity

critical 0

high 2

medium 1

low 1

unknown 1