Is github.com/basekick-labs/arc safe to use?

Vulert records 6 vulnerabilities for github.com/basekick-labs/arc in Go: 0 critical, 2 high, 1 medium and 0 low, plus 3 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/basekick-labs/arc's Vulert package health score?

Vulert scores github.com/basekick-labs/arc 70/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Which version of github.com/basekick-labs/arc should I use?

v25.11.2+incompatible is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/basekick-labs/arc have?

6 vulnerabilities are recorded for github.com/basekick-labs/arc in the Go ecosystem: 0 critical, 2 high, 1 medium and 0 low, plus 3 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/basekick-labs/arc vulnerabilities disclosed?

6 vulnerabilities were recorded for github.com/basekick-labs/arc in the last 12 months, and the oldest entry in this database dates to 08 Jun 2026. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/basekick-labs/arc are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/basekick-labs/arc for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at https://vulert.com/scanner and Vulert keeps checking the github.com/basekick-labs/arc version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.

Vulnerability Database · Go · Package report

github.com/basekick-labs/arc: vulnerability history, versions and safety

github.com/basekick-labs/arc is a package in the Go ecosystem. Vulert records 6 vulnerabilities for it across 120 releases, from Jun 2026 to Sep 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

6 vulnerabilities recorded H2 M1 U3

0 with no fix published

Every vulnerability has a patched version to move to.

6 in the last 12 months

Most recent disclosure 02 Sep 2026.

See the disclosure history →

0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/basekick-labs/arc vulnerabilities

Vulert verdict on github.com/basekick-labs/arc v25.11.2+incompatible i

Updated on 22 Oct 2026

Every vulnerability Vulert records for this package has a fix, and the newest was recorded 02 Sep 2026. Apply the fixes listed below and you are clear.

Package health score 70/100

Security Some issues to review
Maintenance Sustainable
Popularity Widely used
Community Quiet

What to do: Move the affected dependencies to the fixed versions listed below, then keep the package monitored so the next vulnerability reaches you. Fix it, then keep watch: Vulert alerts you when a new vulnerability affects the version you run. Monitor it with Vulert →

Current release v25.11.2+incompatible — unaffected i
Vulnerabilities on record 6 over 1 year · 6 in the last year i
Latest disclosure 02 Sep 2026 i
Highest CVSS 8.8 i
With no published fix 0 i
Stars 684 i
Last release this month i
Licence AGPL-3.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

Scan your app free →

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/basekick-labs/arc, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

Version	Released	Vulert vulnerabilities	Licence	Fix published	Details
v0.0.0-20261022162323-88d2f6b4010b	22 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261022144459-d85459b89eae	22 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261022113601-78a8f0d9ef3c	22 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261022014231-b0783022f7f2	22 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261021234704-5544edfbfd5e	21 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261021162343-35443222942f	21 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261021121456-c2ae812d062c	21 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261021053734-ee93e8b95901	21 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261021015306-26b5fa93cb94	21 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261021014906-3fe3121f9198	21 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261020221034-5d07b01fbda2	20 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261020121916-c976b76e2f84	20 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261019211407-f2869263d9d9	19 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261019202822-2610cb3dea22	19 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261019202743-b4d98a315979	19 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261019195405-93b201388416	19 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261017143311-8df50485103d	17 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261016145252-4d9f6859fe74	16 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261016053159-7c6559c1e700	16 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261016040957-417a0f888d84	16 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261016025659-77e41db97dc1	16 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261016021457-d67952ced702	16 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261016000233-c76ff093c2f6	16 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261015230115-dd0d9b670062	15 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261015212748-622c27fa0e0a	15 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261015193014-d002638e45be	15 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261015171601-5ccbc906a9af	15 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261015124942-99ee9a753e75	15 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261015035627-947f0cbf33e1	15 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261015015409-f3ebea98629f	15 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261015010056-73e30fbb9ff3	15 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261014231448-dd93913415ab	14 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261014230614-b17bc8da75dd	14 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261014221101-f170b7bf036e	14 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261014211734-99a366bd95bd	14 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261014205152-73eb47983570	14 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261014204110-4f8986c01ab1	14 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261014191638-e3cb831da2c3	14 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261014185704-2d6d93cbdbe4	14 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261014181557-b25ed3a2ffa7	14 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261014181504-59f49ded67d6	14 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261014135934-2bbe3e23c590	14 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013215405-e3f7a4bb9191	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013212619-7cb7bf89e398	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013205633-3bcc81396e1b	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013202309-b2d00205aa02	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013194533-c6cefbcaecb8	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013181458-a8f515b55ffd	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013172744-222fa6847bf7	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013170012-bbb61976b9a9	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013163213-dcc4f7591a7c	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013153458-3bb41d1845c1	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013152053-955b05c1c83c	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013145742-30d022041a3e	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013142622-116a318f936c	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013122439-183020d3b3c7	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261013021709-276a3492f741	13 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012234850-36d0f42a8bf4	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012222237-11385f66d7b3	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012205257-c50902466a97	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012202522-815949d4b5d9	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012200002-7f677b9879b6	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012193847-1d737b02d839	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012190600-523e564fdb99	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012183559-631d950a0ce3	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012173942-06de94768217	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012171339-28625d1c0d80	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012162041-e7758ff01fbb	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012154406-88744d3a099d	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012151040-b7529db4cc7f	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012150842-e073da55277d	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012132538-671abf79d526	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012120037-1567da2dfcff	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012034918-ca9fdd7d389e	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012014709-2f6ae4c99415	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261012004345-aacf017b0d5b	12 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261011231133-1052a4b028af	11 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261011215540-c4a4284410ee	11 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261011202310-73e7fe4142e2	11 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261011194751-0eb92e391b8c	11 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261011183802-b46b352054cc	11 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261011174444-81ddde1b6cb8	11 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261009214052-8107c9d012a6	09 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261009203316-c2ca598ba43c	09 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261009202431-2ebae460b172	09 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261009195655-d2f50730b3f2	09 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261009195010-f4b48c9b8144	09 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261009191709-3903e9a42e88	09 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261009184933-4af188397191	09 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261009173913-ab45d4d54f61	09 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261009170606-3395c09d03a8	09 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261009002452-6d19b4ae83e9	09 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261009001258-5a06ef0c2e77	09 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261008225735-489dcee62dbd	08 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261008222831-5219c45471bc	08 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261008214022-be2a7de9f216	08 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261008212025-b39662ecf890	08 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261008205645-54f9c392bcfe	08 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261008195505-3d945fbeaa94	08 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261008185854-c1c6aae0142d	08 Oct 2026	H2 M1 U3	AGPL-3.0	Yes	Details →
v0.0.0-20261008185100-bde6b8d5e736	08 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261008183005-75e6d7e766ca	08 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261008171615-631b364d12ef	08 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261008171215-a675c9a1af9e	08 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261008163954-a3db8a89bf18	08 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261008154609-ac616f48498e	08 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261008153338-5fd40259d591	08 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261008134254-9cf7cecbd7a0	08 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261008125406-cba6d80efdc2	08 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261008012849-07b220505ce3	08 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261007231300-e5dfdbb32df6	07 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261007225944-91cf330476ed	07 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261007213157-aa0d9b01d6e0	07 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261007211549-457c286e2f59	07 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261007204444-bd6e51465a9c	07 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261007192707-62fded507310	07 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261007190734-a8e8004c0134	07 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261007181120-582059c84553	07 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261007180037-6f5f7b34324a	07 Oct 2026	H2 M1 U3	—	Yes	Details →
v0.0.0-20261007173138-7a1da2b38245	07 Oct 2026	H2 M1 U3	—	Yes	Details →

The newest 120 of 440 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

2026 6

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 6 of the 6 were recorded in the last 12 months.

Other ways into the data

03 Vulnerabilities

Recorded vulnerabilities for github.com/basekick-labs/arc

Vulnerability	Severity	Fixed version ↓	Disclosed ↓
CVE-2026-48050: Unauthenticated Access to Go Debug Pprof Endpoints in Arc Leads to Runtime State Leakage and CPU-Burn DoS	8.8 high	0.0.0-20260520170331-32a4091fb949	11 Jun 2026
CVE-2026-47735: Arc Package Arbitrary Local File Read Vulnerability	7.1 high	0.0.0-20260520141557-91bdc29d1a02	08 Jun 2026
CVE-2026-55678: Unauthenticated Cluster Node Admission in Arc Package	6.9 medium	0.0.0-20260615160325-38402ad2ebdd	28 Aug 2026
CVE-2026-48050: Unauthenticated Access to Go Debug Pprof Endpoints in github.com/basekick-labs/arc	N/A unrated	0.0.0-20260520170331-32a4091fb949	25 Jun 2026
CVE-2026-47735: Arbitrary Local-File Read Vulnerability in github.com/basekick-labs/arc	N/A unrated	0.0.0-20260520141557-91bdc29d1a02	25 Jun 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 22/Oct/2026 · Vulnerabilities in our DB: 524173