Vulnerability Database · Go · Package report

cuelang.org/go: vulnerability history, versions and safety

cuelang.org/go is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

Vulert verdict on cuelang.org/go v0.17.1 i

Updated on 23 Oct 2026

Good news: v0.17.1, the version you would install today, has no known vulnerabilities.

Package health score 100/100
  • Security No known security issues
  • Maintenance Sustainable
  • Popularity Not enough data
  • Community Not enough data

What to do: Stay on v0.17.1 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.17.1 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v0.17.1 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Last release 3 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for cuelang.org/go, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.18.0-rc.1.0.20261022184122-b68cd71635c1 22 Oct 2026 none Apache-2.0 — Details →
v0.18.0-rc.1.0.20261022123608-c5dedb244b02 22 Oct 2026 none Apache-2.0 — Details →
v0.18.0-rc.1.0.20261022081529-aab026e95c0b 22 Oct 2026 none Apache-2.0 — Details →
v0.18.0-rc.1.0.20261021155208-fa8b4012d432 21 Oct 2026 none Apache-2.0 — Details →
v0.18.0-rc.1.0.20261020162417-3aa23cc4e45c 20 Oct 2026 none Apache-2.0 — Details →
v0.18.0-rc.1.0.20261020072336-4627d40b61d3 20 Oct 2026 none Apache-2.0 — Details →
v0.18.0-rc.1.0.20261018170955-a42bb0ac4ef4 18 Oct 2026 none Apache-2.0 — Details →
v0.18.0-rc.1 15 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.3.0.20261015091316-696e1658f0fc 15 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.3.0.20261013151513-ffb2adbe9680 13 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.3.0.20261012152442-71c8062666c4 12 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.3.0.20261008224848-a4f52c2332e4 08 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.3.0.20261007094605-e191f36cc36c 07 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.3.0.20261006131736-ca45029f3605 06 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.3.0.20261005164121-05487243e40b 05 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261005105320-7fb7792580ac 05 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.3 05 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20261005093438-f7c5917cae07 05 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20261004131555-671541f845e2 04 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20261002131943-93402de82790 02 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20261001214517-bed21870acf5 01 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20261001211534-0edbb5b800c3 01 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20261001134224-bdcb5be8d1af 01 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261001072353-59086bcef631 01 Oct 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20261001072353-59086bcef631 01 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20260930163304-18999381c85a 30 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20260930163304-18999381c85a 30 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20260930152510-aaa0cf5c8ceb 30 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20260930074717-976bb2564686 30 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20260929154002-85bd3c356aff 29 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20260928223209-88a76ae869a7 28 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20260923221757-e48256aa2950 23 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20260923134701-ffa0a39fe529 23 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20260920135747-d39753ad0f61 20 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20260918143709-50e1f64b6460 18 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2.0.20260917130812-d54641bccbde 17 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.2 15 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260914150214-5e2823acf496 14 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260914150214-e7fa93e0c9c2 14 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260914150214-f26dac4b22f9 14 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260911104540-e83d953917a5 11 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260911103737-7d035b83b645 11 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260911103737-c9976b7eb1da 11 Sep 2026 none Apache-2.0 — Details →
v0.0.0-goreleaser.202609101448 10 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260909084032-3d1cf46d6466 09 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260903175936-eb886ed07a08 03 Sep 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260828124956-635e4bb441b2 28 Aug 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260826143038-340c0ea104b2 26 Aug 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260825110805-69d097ba2878 25 Aug 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260819141629-2920479eca26 19 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260805112343-f356f8f46ced 05 Aug 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260805112343-f356f8f46ced 05 Aug 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1.0.20260805112320-388c29d9ba6e 05 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260804134202-adba4fa483f8 04 Aug 2026 none Apache-2.0 — Details →
v0.18.0-alpha.1 04 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260804114117-2e12f86f0c33 04 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260804113128-cacb4b84a359 04 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260804113021-d57c3489cfbe 04 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260804110819-a05d05d5248a 04 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260804105921-5c8b3c854bc7 04 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260804105748-b821e57d86cf 04 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260804105507-6b7890567295 04 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260804104807-e3287a239ebf 04 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260803111558-d0182fcb6631 03 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260803111538-910bb325f941 03 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260803080703-15604e6f9adc 03 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260802123201-bed18f8e3707 02 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260802123129-f823d0289d18 02 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260802123111-a0255e6bd6e1 02 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260801224313-bc48f0abc949 01 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260801224223-77bacc127858 01 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260801224202-64ce3ae70680 01 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260801224141-9db7abb19e10 01 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260801224126-6f25808c8783 01 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260801224102-8e2ad079a7d0 01 Aug 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260731161419-486f8a3be585 31 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260731161252-82027f43c94b 31 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260731161237-175c3106a593 31 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260731161044-c9226590b81d 31 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260731113747-f8ee95634b72 31 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260731113607-cf814093ded7 31 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260731113529-3a431f7fc052 31 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260731113511-d86aa88c38ea 31 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260730120803-4d5f6788b3cd 30 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260730120745-164e85f9b0d0 30 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724155814-fa53f8cb9d9e 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724155725-60367ad5cf36 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724155711-1a0b5070074f 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724155620-86a53f03a51c 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724155603-0e35d499713a 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724155547-8479b7146951 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724155512-1c4adbf4fe5e 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724132707-e41d6508e63d 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724131831-5196d8130db2 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724125248-1bbc1cee6070 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724125230-a3932faa5c07 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724125153-cd52e62ab6d8 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724125136-a72d1decab2e 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724125117-a0d0d536b78e 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724125043-830777fd62d8 24 Jul 2026 none Apache-2.0 — Details →
v0.18.0-0.dev.0.20260724093434-4924c9196f09 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724093413-6e0a8ee5b03d 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724093351-5262a2680b31 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724093318-57ad75d3474a 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724093301-74f7576e9f75 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724093211-5686a19d3a14 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724093101-13d3b3c97d7b 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724093045-0f6728377e98 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724093031-7a8bdfdc203c 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724093015-c3d300ef4787 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724093002-98da491830c1 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724092946-39c3854cb2c1 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724092930-e788adb8913c 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724092910-746e6fb4f1ff 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260724092855-5c5863388d1d 24 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260723144630-8f4d7288575f 23 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260723144439-752345ae17f1 23 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260723130708-42c6ed1a4796 23 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260723130458-a703ca920fa4 23 Jul 2026 none — — Details →
v0.18.0-0.dev.0.20260723114710-8894549c9650 23 Jul 2026 none — — Details →

The newest 120 of 4,807 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for cuelang.org/go

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About cuelang.org/go

Is cuelang.org/go safe to use?

Vulert has no vulnerabilities on record for cuelang.org/go in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is cuelang.org/go's Vulert package health score?

Vulert scores cuelang.org/go 100/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of cuelang.org/go affected?

No. v0.17.1, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of cuelang.org/go should I use?

v0.17.1 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does cuelang.org/go have?

0 vulnerabilities are recorded for cuelang.org/go in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new cuelang.org/go vulnerabilities disclosed?

0 vulnerabilities were recorded for cuelang.org/go in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of cuelang.org/go are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor cuelang.org/go for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the cuelang.org/go version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.