VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/apache/servicecomb-service-center: vulnerability history, versions and safety

github.com/apache/servicecomb-service-center is a package in the Go ecosystem. Vulert records 5 vulnerabilities for it across 120 releases, from Sep 2021 to Jun 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
5 vulnerabilities recorded H2 M1 U2
i
2 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/apache/servicecomb-service-center vulnerabilities

Vulert verdict on github.com/apache/servicecomb-service-center v1.4.8 i

Updated on 23 Oct 2026

Careful: 2 of the 5 vulnerabilities Vulert records for this package have no fix yet. Plan around those, or apply the workaround listed for each. The rest have a fixed version to move to.

Package health score 72/100
  • Security Some issues to review
  • Maintenance Sustainable
  • Popularity Widely used
  • Community Quiet

What to do: Plan around the 2 vulnerabilities with no published fix: each lists the affected range and any workaround that reduces exposure. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v1.4.8 — unaffected i
  • Vulnerabilities on record 5 over 2 years · 0 in the last year i
  • Latest disclosure 28 Jun 2024 i
  • Highest CVSS 7.6 i
  • With no published fix 2 i
  • Stars 1,345 i
  • OpenSSF scorecard 3/10 i
  • Last release 9 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/apache/servicecomb-service-center, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.4.1-0.20260122014503-92df4d978025 22 Jan 2026 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20260117090836-f9ae11cfb211 17 Jan 2026 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250903033231-e21991283eee 03 Sep 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250826015526-097f762835d9 26 Aug 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.9-0.20250825142719-f60eb4d959d8 25 Aug 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250823102714-9dd121251eae 23 Aug 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.9-0.20250820123944-234496eba79e 20 Aug 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250807021039-de7b2cd67710 07 Aug 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250625130640-fe5ff175c274 25 Jun 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250624021107-7df8f70ff076 24 Jun 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250509105043-2081f3c1b7e6 09 May 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250320151657-f8ffed7f41b3 20 Mar 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250306164436-775ee3626fe4 06 Mar 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250306114105-04b842958702 06 Mar 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250305024448-9083ad29552e 05 Mar 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250220112627-47b2e16b87c5 20 Feb 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250206112805-ff843857e5dd 06 Feb 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250118071307-4a07d7e6e726 18 Jan 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20250111080715-8a969df46dd1 11 Jan 2025 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20241218015318-24b5994a59ec 18 Dec 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20241202100518-215f4b5151fd 02 Dec 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20241122095229-b0ed15b65953 22 Nov 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20241015032548-b76d2fcf5bbf 15 Oct 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20241008101200-ac086ede84df 08 Oct 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240920061944-f83497ff1a51 20 Sep 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.9-0.20240913141546-43004ffe0367 13 Sep 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240902134343-e7b3288f9ead 02 Sep 2024 H2 M1 U2 Apache-2.0 No Details →
v0.0.0-20240813091959-983f3f39868b 13 Aug 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240813091959-983f3f39868b 13 Aug 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240716094710-dc6d3d1966ff 16 Jul 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240715140159-eaf52a2a27c1 15 Jul 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240627143718-6f46e0a56c48 27 Jun 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240621022228-0b5a7de0803a 21 Jun 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240620084513-bec7167c2775 20 Jun 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240606121206-bd2ee25e2267 06 Jun 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240606093326-59149cd25ca5 06 Jun 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240601081248-b9e258c4e3bc 01 Jun 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240601045559-8559214b464f 01 Jun 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240531102414-f27f04733cd0 31 May 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240525020457-4b61afc27fe3 25 May 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240415150320-78187873c068 15 Apr 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240401133555-8be30c5a36f1 01 Apr 2024 H2 M1 U2 Apache-2.0 No Details →
v0.0.0-20240329075757-05340414c16a 29 Mar 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240329075757-05340414c16a 29 Mar 2024 H2 M1 U2 Apache-2.0 No Details →
v0.0.0-20240328150344-01abe81dc5d0 28 Mar 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240326095006-c84f0e0c022d 26 Mar 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240325141235-9c8ce411d8b7 25 Mar 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240318141125-ab888f04a059 18 Mar 2024 H2 M1 U2 Apache-2.0 No Details →
v0.0.0-20240318132810-b133e42a18f1 18 Mar 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240318132810-b133e42a18f1 18 Mar 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240316123218-a6ef87c4be74 16 Mar 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240117011735-58dd5cde763a 17 Jan 2024 H2 M1 U2 Apache-2.0 No Details →
v0.0.0-20240115020207-a0e09e1f70e8 15 Jan 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240115020207-a0e09e1f70e8 15 Jan 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240108135616-803802a61b22 08 Jan 2024 H2 M1 U2 Apache-2.0 No Details →
v0.0.0-20240105122325-93c4d37eec3b 05 Jan 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20240105122325-93c4d37eec3b 05 Jan 2024 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20231227142012-da28f19ed8d8 27 Dec 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20231120023308-ce7afe04f5bc 20 Nov 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20231116160708-20dc4f80a594 16 Nov 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230916094956-da90e5f0cc9c 16 Sep 2023 H2 M1 U2 Apache-2.0 No Details →
v0.0.0-20230826074538-429da63c7a1c 26 Aug 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230826074538-429da63c7a1c 26 Aug 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230509141245-8df058bae1cc 09 May 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230221010045-1a9d1d85f300 21 Feb 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230220144113-aafb3edde77c 20 Feb 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230215064631-042301488272 15 Feb 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230214144019-2f96fd99d504 14 Feb 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230214140429-a742b8a86c93 14 Feb 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230214140322-bac50a6e6239 14 Feb 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230214125719-b4aa616c8376 14 Feb 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230208074825-2a92f4e2804d 08 Feb 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230207010200-ab3c89c8cf78 07 Feb 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230203062025-d25cb40d40eb 03 Feb 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230203025451-c33787c700be 03 Feb 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230110011422-f11564bd8b51 10 Jan 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20230109093722-0e2fa607250d 09 Jan 2023 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221216015703-bffb6ac0c325 16 Dec 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221212143331-0d4da67f6ba5 12 Dec 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221122121604-9835e2b66f44 22 Nov 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221109132520-1885b50c6f5d 09 Nov 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221109061451-5f00b3aafeaa 09 Nov 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221108151801-31c144435da1 08 Nov 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221108132318-a2189be71ea3 08 Nov 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221108060804-fe20a0342dfe 08 Nov 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221107141509-a750c7c94437 07 Nov 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221107123941-2584c55e2e3c 07 Nov 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221107023913-db587cfb0aca 07 Nov 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221027124942-3486cb568e00 27 Oct 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221027104419-84672a3dd52b 27 Oct 2022 H2 M1 U2 Apache-2.0 No Details →
v0.0.0-20221025104811-44b36e3e2c6a 25 Oct 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221025104811-44b36e3e2c6a 25 Oct 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221025102638-4632a9dc3370 25 Oct 2022 H2 M1 U2 Apache-2.0 No Details →
v0.0.0-20221024090746-ab03c9f0f6b4 24 Oct 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221024090746-ab03c9f0f6b4 24 Oct 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221022092750-513648769226 22 Oct 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221022090302-22db76ae89fe 22 Oct 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221022070525-c36b790b3274 22 Oct 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20221022070452-c0df5c366607 22 Oct 2022 H2 M1 U2 Apache-2.0 No Details →
v1.4.1-0.20220920010107-ea21499d52d9 20 Sep 2022 H2 M1 U2 Apache-2.0 No Details →
v0.0.0-20220907103208-a8e52e2da127 07 Sep 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220907103208-a8e52e2da127 07 Sep 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220907092605-164d97ece100 07 Sep 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220831073952-ab1cc9f6fb49 31 Aug 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220830145812-1e20e0cf1cd4 30 Aug 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220830143739-9244f79150cb 30 Aug 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220830091014-dc66edd6eef5 30 Aug 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220823112325-bcfd19156e39 23 Aug 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220823092340-4684e466a980 23 Aug 2022 H2 M1 U2 — No Details →
v0.0.0-20220823031949-e01d48593514 23 Aug 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220823031949-e01d48593514 23 Aug 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220820100130-a9bb65c394e0 20 Aug 2022 H2 M1 U2 — No Details →
v0.0.0-20220820084454-1e4dd8a52097 20 Aug 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220820084454-1e4dd8a52097 20 Aug 2022 H2 M1 U2 — No Details →
v0.0.0-20220808095412-d291b0a1de11 08 Aug 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220808095412-d291b0a1de11 08 Aug 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220805022659-1f652488bcf5 05 Aug 2022 H2 M1 U2 — No Details →
v0.0.0-20220803092615-20240cf563f0 03 Aug 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220803092615-20240cf563f0 03 Aug 2022 H2 M1 U2 — No Details →
v1.4.1-0.20220803031028-6b23a7bc2112 03 Aug 2022 H2 M1 U2 — No Details →

The newest 120 of 544 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2021 1
  • 2024 4

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 5 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/apache/servicecomb-service-center

The 5 most severe of 5 vulnerabilities recorded for this package

Search all 5 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2023-44313: Apache ServiceComb Service-Center Server-Side Request Forgery vulnerability 7.6 high 2.2.0 31 Jan 2024
CVE-2021-21501: Path traversal in ServiceCenter 7.5 high 2.0.0 01 Sep 2021
CVE-2023-44312: Apache ServiceComb Service-Center Exposure of Sensitive Information to an Unauthorized Actor 5.8 medium 2.2.0 31 Jan 2024
CVE-2023-44313: Apache ServiceComb Service-Center Server-Side Request Forgery in github.com/apache/servicecomb-service-center N/A unrated No fix published 28 Jun 2024
CVE-2023-44312: Apache ServiceComb Service-Center Exposure of Sensitive Information to an Unauthorized Actor N/A unrated No fix published 28 Jun 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/apache/servicecomb-service-center

Is github.com/apache/servicecomb-service-center safe to use?

Vulert records 5 vulnerabilities for github.com/apache/servicecomb-service-center in Go: 0 critical, 2 high, 1 medium and 0 low, plus 2 not yet rated. 2 of them have no published fix yet, so those are the ones to avoid or mitigate.

What is github.com/apache/servicecomb-service-center's Vulert package health score?

Vulert scores github.com/apache/servicecomb-service-center 72/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Which version of github.com/apache/servicecomb-service-center should I use?

v1.4.8 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/apache/servicecomb-service-center have?

5 vulnerabilities are recorded for github.com/apache/servicecomb-service-center in the Go ecosystem: 0 critical, 2 high, 1 medium and 0 low, plus 2 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/apache/servicecomb-service-center vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/apache/servicecomb-service-center in the last 12 months, and the oldest entry in this database dates to 01 Sep 2021. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/apache/servicecomb-service-center are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/apache/servicecomb-service-center for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/apache/servicecomb-service-center version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.