VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

code.cloudfoundry.org/gorouter: vulnerability history, versions and safety

code.cloudfoundry.org/gorouter is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from May 2021 to Jul 2021. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded H1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all code.cloudfoundry.org/gorouter vulnerabilities

Vulert verdict on code.cloudfoundry.org/gorouter v0.0.0-20250429140807-a602bb6a6243 i

Updated on 23 Oct 2026

Action needed: v0.0.0-20250429140807-a602bb6a6243 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 65/100
  • Security Minor issues
  • Maintenance Maintaining
  • Popularity Niche
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.0.0-20250429140807-a602bb6a6243 — affected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 28 Jul 2021 i
  • Highest CVSS 7.5 i
  • With no published fix 0 i
  • Stars 443 i
  • OpenSSF scorecard 2/10 i
  • Last release 17 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for code.cloudfoundry.org/gorouter, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20250429140807-a602bb6a6243 29 Apr 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250417172726-b5be7589592b 17 Apr 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250416195830-14cb2825e134 16 Apr 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250414175435-85f72a08aa68 14 Apr 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250414153836-dce64856ab82 14 Apr 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250328150445-ffd637c4d77c 28 Mar 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250324085901-957aaf4e6f94 24 Mar 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250320204840-47ead2d28258 20 Mar 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250318193157-8ee00dfa806e 18 Mar 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250228095952-3583c10e372d 28 Feb 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250203153300-1e14fcfdab77 03 Feb 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250131220708-a34e69090fca 31 Jan 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250117183630-b0d88bb6204c 17 Jan 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250115080402-a17697c95516 15 Jan 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250114162302-c713f5545978 14 Jan 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20250109163256-c9fa52fb78df 09 Jan 2025 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241219215611-c6b0bb100f9f 19 Dec 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241217161006-2dd96da8dc9a 17 Dec 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241216154315-b6103564382b 16 Dec 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241213185649-d963f78b6390 13 Dec 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241213173055-905ee53f9222 13 Dec 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241119143639-aa6650d27dc7 19 Nov 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241118153201-2794143ac254 18 Nov 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241104204636-9ee77f4fdebd 04 Nov 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241029142338-e3d761135f70 29 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241028193538-ec6d86169a80 28 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241028155234-c35a8cd38cff 28 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241025163440-079f32670058 25 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241025141642-18da3a576084 25 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241022134824-9ca6acc190e7 22 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241018174652-5174c184566b 18 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241018164750-ab2bc0c8ddf4 18 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20241018145450-e768fec09ea5 18 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240930162550-7097cd0e18f1 30 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240930142453-9f678fd74bbf 30 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240926150511-38453e093175 26 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240920122256-8c4f7a488018 20 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240913174207-8b0bcc7be2e3 13 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240906112616-6331451d30db 06 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240821054628-6823517e5f74 21 Aug 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240813212148-3167187a8a56 13 Aug 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240813165959-f0c5cb18f52c 13 Aug 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240807171200-3cd25a5a7399 07 Aug 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240723075009-1fd3db311bb3 23 Jul 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240708145824-8c9fa99dae1d 08 Jul 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240703204849-3dbb3b4c79bc 03 Jul 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240619140758-603c677bf798 19 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240614142436-122888a34e07 14 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240611110557-2d14a352915f 11 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240605150641-c58cdbb1c782 05 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240605125023-467a3aae5917 05 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240524170342-18942c510f30 24 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240524113330-9fc0d0297793 24 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240524001415-a9a61601d8b9 24 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240522161525-61c95ca86179 22 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240514195655-c8770def2859 14 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240507150116-b54aeb2ca5a8 07 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240503192622-07591e08ee7d 03 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240502202002-4a24b6ae2b69 02 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240429140314-35ae37e3a21c 29 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240425133711-0c89eb91af85 25 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240417124623-2ae1647bff83 17 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240417113839-c1010d3ac974 17 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240405184340-bcd8c7dcd5f9 05 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240405152816-6b9e16227b65 05 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240405150719-63abcb6ee536 05 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240405124155-e7dfb8a676ed 05 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240403133209-4c57f5a95d83 03 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240308221750-e60aaf53b0c8 08 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240307174849-6f1bf4cc5733 07 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240307145713-1cf1c3c86b49 07 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240304204857-6c6bd520ad93 04 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240303144847-d16c7a7f7398 03 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240228141355-1ac049c0bcf6 28 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240227161251-9c55e9c71b45 27 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240220154356-9015251917b9 20 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240212083310-4097f31425a2 12 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240207183957-ef670d95b9bf 07 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240207131106-ad6b87753860 07 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240129153133-064a5f0050ba 29 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240129142759-f0903363eedb 29 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240126084905-6e8fddab36c9 26 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240123193000-5da3cb96b7d1 23 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240123155614-b2d621c34c85 23 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240122211355-68b3bda57696 22 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240109213414-93e8cb70283e 09 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20240103182948-7e9dbf805eb9 03 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231215175702-5d4febe0e311 15 Dec 2023 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231212155923-6f1da5975b08 12 Dec 2023 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231212151722-2c4e0a08438f 12 Dec 2023 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231207092046-24447aaa5dcf 07 Dec 2023 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231205144213-ddb5a02d761f 05 Dec 2023 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231204131327-ba8fa897d767 04 Dec 2023 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231204124606-64806c2818bf 04 Dec 2023 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231204121400-4c839fdba20a 04 Dec 2023 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231130173904-e9019bfbef3d 30 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231127204000-f1e51e02c5d5 27 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231113123809-1e6cea827770 13 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231108210211-2f0bfad7a779 08 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231025140300-44d54f83fb3f 25 Oct 2023 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20231013153901-091af47de305 13 Oct 2023 H1 U1 — Yes Details →
v0.0.0-20231011145412-9d433f9f5d5e 11 Oct 2023 H1 U1 — Yes Details →
v0.0.0-20231011143156-00aac8276e2e 11 Oct 2023 H1 U1 — Yes Details →
v0.0.0-20230921132824-7ae1d87e53b3 21 Sep 2023 H1 U1 — Yes Details →
v0.0.0-20230915211339-62f4579a8951 15 Sep 2023 H1 U1 — Yes Details →
v0.0.0-20230912165156-1dafeaa9a3d7 12 Sep 2023 H1 U1 — Yes Details →
v0.0.0-20230911184944-587fdbdf818c 11 Sep 2023 H1 U1 — Yes Details →
v0.0.0-20230905155839-31a88e699578 05 Sep 2023 H1 U1 — Yes Details →
v0.0.0-20230831165705-7418c463c59d 31 Aug 2023 H1 U1 — Yes Details →
v0.0.0-20230823183010-b89b4d701fe7 23 Aug 2023 H1 U1 — Yes Details →
v0.0.0-20230822180807-4962edfe88d4 22 Aug 2023 H1 U1 — Yes Details →
v0.0.0-20230727205201-b820e884e3d1 27 Jul 2023 H1 U1 — Yes Details →
v0.0.0-20230712152659-7c163e56644f 12 Jul 2023 H1 U1 — Yes Details →
v0.0.0-20230706133923-05f22665c89d 06 Jul 2023 H1 U1 — Yes Details →
v0.0.0-20230705133516-75a1ae3d49e7 05 Jul 2023 H1 U1 — Yes Details →
v0.0.0-20230629193828-87c7dacdbac8 29 Jun 2023 H1 U1 — Yes Details →
v0.0.0-20230628164147-60657ae9e6f1 28 Jun 2023 H1 U1 — Yes Details →
v0.0.0-20230612154741-e658e03aeea3 12 Jun 2023 H1 U1 — Yes Details →
v0.0.0-20230530174637-9e177d981a00 30 May 2023 H1 U1 — Yes Details →
v0.0.0-20230526143954-1d3e7d1d9480 26 May 2023 H1 U1 — Yes Details →

The newest 120 of 737 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2021 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for code.cloudfoundry.org/gorouter

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↑ Disclosed ↑
CVE-2019-11289: Cloud Foundry Routing Improper Input Validation vulnerability 7.5 high 0.0.0-20191101214924-b1b5c44e050f 18 May 2021
CVE-2019-11289: Panic in decryption in code.cloudfoundry.org/gorouter N/A unrated 0.0.0-20191101214924-b1b5c44e050f 28 Jul 2021

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About code.cloudfoundry.org/gorouter

Is code.cloudfoundry.org/gorouter safe to use?

Vulert records 2 vulnerabilities for code.cloudfoundry.org/gorouter in Go: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is code.cloudfoundry.org/gorouter's Vulert package health score?

Vulert scores code.cloudfoundry.org/gorouter 65/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of code.cloudfoundry.org/gorouter affected?

Yes. v0.0.0-20250429140807-a602bb6a6243, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of code.cloudfoundry.org/gorouter should I use?

v0.0.0-20250429140807-a602bb6a6243 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does code.cloudfoundry.org/gorouter have?

2 vulnerabilities are recorded for code.cloudfoundry.org/gorouter in the Go ecosystem: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new code.cloudfoundry.org/gorouter vulnerabilities disclosed?

0 vulnerabilities were recorded for code.cloudfoundry.org/gorouter in the last 12 months, and the oldest entry in this database dates to 18 May 2021. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of code.cloudfoundry.org/gorouter are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor code.cloudfoundry.org/gorouter for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the code.cloudfoundry.org/gorouter version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.