VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/bytedance/sonic: vulnerability history, versions and safety

github.com/bytedance/sonic is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/bytedance/sonic vulnerabilities

Vulert verdict on github.com/bytedance/sonic v1.15.4 i

Updated on 23 Oct 2026

Good news: v1.15.4, the version you would install today, has no known vulnerabilities.

Package health score 85/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Quiet

What to do: Stay on v1.15.4 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.15.4 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v1.15.4 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 9,633 i
  • OpenSSF scorecard 4/10 i
  • Last release 1 month ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/bytedance/sonic, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20261020092244-02863a8a9d09 20 Oct 2026 none Apache-2.0 — Details →
v1.15.5-0.20261020092244-02863a8a9d09 20 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20260926141354-5ce94543c910 26 Sep 2026 none Apache-2.0 — Details →
v1.15.5-0.20260926141354-5ce94543c910 26 Sep 2026 none Apache-2.0 — Details →
v1.15.5-0.20260926092957-e6ff7fb2f088 26 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260910154329-f1003e13e789 10 Sep 2026 none Apache-2.0 — Details →
v1.15.4 10 Sep 2026 none Apache-2.0 — Details →
v1.15.4-0.20260910154329-f1003e13e789 10 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260730064818-2a36d6da63e2 30 Jul 2026 none Apache-2.0 — Details →
v1.15.3 30 Jul 2026 none Apache-2.0 — Details →
v1.15.3-0.20260730064818-2a36d6da63e2 30 Jul 2026 none Apache-2.0 — Details →
v1.15.3-0.20260730060638-a1ed9d8a88fb 30 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260730041748-ed18558a5e2e 30 Jul 2026 none Apache-2.0 — Details →
v1.15.3-0.20260730041748-ed18558a5e2e 30 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260604084939-579b6ffa7b3b 04 Jun 2026 none Apache-2.0 — Details →
v1.15.2 04 Jun 2026 none Apache-2.0 — Details →
v1.15.2-0.20260604084939-d77451355d8a 04 Jun 2026 none Apache-2.0 — Details →
v1.15.2-0.20260602032211-096feeb5a349 02 Jun 2026 none Apache-2.0 — Details →
v1.15.2-dev.arm64.0 26 May 2026 none Apache-2.0 — Details →
v0.0.0-20260513062619-47cc3ed0c10b 13 May 2026 none Apache-2.0 — Details →
v1.15.2-0.20260513062619-47cc3ed0c10b 13 May 2026 none Apache-2.0 — Details →
v0.0.0-20260330110849-4ddcd087571a 30 Mar 2026 none Apache-2.0 — Details →
v1.15.1 30 Mar 2026 none Apache-2.0 — Details →
v1.15.1-0.20260330110849-4ddcd087571a 30 Mar 2026 none Apache-2.0 — Details →
v0.0.0-20260327075416-4c8f70b8692c 27 Mar 2026 none Apache-2.0 — Details →
v1.15.1-0.20260327075416-4c8f70b8692c 27 Mar 2026 none Apache-2.0 — Details →
v1.15.1-0.20260327071649-d64ddf953f35 27 Mar 2026 none Apache-2.0 — Details →
v1.15.1-0.20260326113513-97bbd4820297 26 Mar 2026 none Apache-2.0 — Details →
v0.0.0-20260316072832-3835c030aefd 16 Mar 2026 none Apache-2.0 — Details →
v1.15.1-0.20260316072832-3835c030aefd 16 Mar 2026 none Apache-2.0 — Details →
v0.0.0-20260305062320-c9e5b0f6896d 05 Mar 2026 none Apache-2.0 — Details →
v1.15.1-0.20260305062320-c9e5b0f6896d 05 Mar 2026 none Apache-2.0 — Details →
v0.0.0-20260304061837-28040bddfcb2 04 Mar 2026 none Apache-2.0 — Details →
v1.15.1-0.20260304061837-28040bddfcb2 04 Mar 2026 none Apache-2.0 — Details →
v0.0.0-20260302075537-f8ba977bb657 02 Mar 2026 none Apache-2.0 — Details →
v1.15.1-0.20260302075537-f8ba977bb657 02 Mar 2026 none Apache-2.0 — Details →
v1.15.1-0.20260302035249-9a1c1488152f 02 Mar 2026 none Apache-2.0 — Details →
v0.0.0-20260228040149-07244630e218 28 Feb 2026 none Apache-2.0 — Details →
v1.15.1-0.20260228040149-07244630e218 28 Feb 2026 none Apache-2.0 — Details →
v1.15.1-0.20260227063731-f7c86b97b1d3 27 Feb 2026 none Apache-2.0 — Details →
v0.0.0-20260202073222-646f13ab7d5d 02 Feb 2026 none Apache-2.0 — Details →
v1.15.1-0.20260202073222-646f13ab7d5d 02 Feb 2026 none Apache-2.0 — Details →
v0.0.0-20260122124114-afa2fcee563e 22 Jan 2026 none Apache-2.0 — Details →
v1.14.3-0.20260122124114-afa2fcee563e 22 Jan 2026 none Apache-2.0 — Details →
v1.15.0 22 Jan 2026 none Apache-2.0 — Details →
v0.0.0-20260122100319-97eeff609297 22 Jan 2026 none Apache-2.0 — Details →
v1.14.3-0.20260122100319-97eeff609297 22 Jan 2026 none Apache-2.0 — Details →
v1.14.3-0.20260121032450-66b3de0be067 21 Jan 2026 none Apache-2.0 — Details →
v1.14.3-0.20260119070250-fd03617f46ad 19 Jan 2026 none Apache-2.0 — Details →
v1.14.3-0.20251225073553-dc06ae25cc26 25 Dec 2025 none Apache-2.0 — Details →
v0.0.0-20251218033458-3afe8f25c931 18 Dec 2025 none Apache-2.0 — Details →
v1.14.3-0.20251218033458-3afe8f25c931 18 Dec 2025 none Apache-2.0 — Details →
v0.0.0-20251120112852-388df2d3cca6 20 Nov 2025 none Apache-2.0 — Details →
v1.14.3-0.20251120112852-388df2d3cca6 20 Nov 2025 none Apache-2.0 — Details →
v0.0.0-20251113022209-8a732a36841d 13 Nov 2025 none Apache-2.0 — Details →
v1.14.3-0.20251113022209-8a732a36841d 13 Nov 2025 none Apache-2.0 — Details →
v0.0.0-20251028115002-3fbf6d53e14e 28 Oct 2025 none Apache-2.0 — Details →
v1.14.2 28 Oct 2025 none Apache-2.0 — Details →
v0.0.0-20251028092447-438eca44f360 28 Oct 2025 none Apache-2.0 — Details →
v0.0.0-20251027060235-045dce41fa5e 27 Oct 2025 none Apache-2.0 — Details →
v1.14.2-0.20251027060235-045dce41fa5e 27 Oct 2025 none Apache-2.0 — Details →
v0.0.0-20251024061124-a71350bdcf30 24 Oct 2025 none Apache-2.0 — Details →
v1.14.2-0.20251024061124-a71350bdcf30 24 Oct 2025 none Apache-2.0 — Details →
v0.0.0-20251023123431-cdd973986b95 23 Oct 2025 none Apache-2.0 — Details →
v1.14.2-0.20251023123431-cdd973986b95 23 Oct 2025 none Apache-2.0 — Details →
v1.14.2-0.20251017122844-dd81fa44c645 17 Oct 2025 none Apache-2.0 — Details →
v0.0.0-20251010110621-72bd4caf6fb6 10 Oct 2025 none Apache-2.0 — Details →
v1.14.2-0.20251010110621-72bd4caf6fb6 10 Oct 2025 none Apache-2.0 — Details →
v0.0.0-20250929013550-48ba40b8e47b 29 Sep 2025 none Apache-2.0 — Details →
v1.14.2-0.20250929013550-48ba40b8e47b 29 Sep 2025 none Apache-2.0 — Details →
v0.0.0-20250916073852-d55adc49e6c8 16 Sep 2025 none Apache-2.0 — Details →
v1.14.2-0.20250916073852-d55adc49e6c8 16 Sep 2025 none Apache-2.0 — Details →
v1.14.2-0.20250916061405-2eeb744e27b1 16 Sep 2025 none Apache-2.0 — Details →
v0.0.0-20250902060732-53b981bdd59c 02 Sep 2025 none Apache-2.0 — Details →
v1.14.1 02 Sep 2025 none Apache-2.0 — Details →
v0.0.0-20250902054150-908af5dfaf7d 02 Sep 2025 none Apache-2.0 — Details →
v0.0.0-20250829045648-d73adceb9316 29 Aug 2025 none Apache-2.0 — Details →
v1.14.1-0.20250829045648-d73adceb9316 29 Aug 2025 none Apache-2.0 — Details →
v0.0.0-20250827060038-76b66f064967 27 Aug 2025 none Apache-2.0 — Details →
v1.14.1-0.20250827060038-76b66f064967 27 Aug 2025 none Apache-2.0 — Details →
v1.14.1-0.20250821071825-5282f6f98504 21 Aug 2025 none Apache-2.0 — Details →
v1.14.1-0.20250820070933-769eaab62e5d 20 Aug 2025 none Apache-2.0 — Details →
v1.14.1-0.20250820015837-4a48de0723d5 20 Aug 2025 none Apache-2.0 — Details →
v0.0.0-20250817055915-a09ee02ff36f 17 Aug 2025 none Apache-2.0 — Details →
v1.14.1-0.20250817055915-a09ee02ff36f 17 Aug 2025 none Apache-2.0 — Details →
v0.0.0-20250814061747-52f9a01eb9d0 14 Aug 2025 none Apache-2.0 — Details →
v1.14.1-0.20250814061747-52f9a01eb9d0 14 Aug 2025 none Apache-2.0 — Details →
v0.0.0-20250811141754-d99cd2ae4335 11 Aug 2025 none Apache-2.0 — Details →
v1.14.1-0.20250811141754-d99cd2ae4335 11 Aug 2025 none Apache-2.0 — Details →
v0.0.0-20250811140934-dbee9fe933c4 11 Aug 2025 none Apache-2.0 — Details →
v1.14.1-0.20250811140934-dbee9fe933c4 11 Aug 2025 none Apache-2.0 — Details →
v0.0.0-20250811070729-94282dc208cb 11 Aug 2025 none Apache-2.0 — Details →
v1.14.1-0.20250811070729-94282dc208cb 11 Aug 2025 none Apache-2.0 — Details →
v0.0.0-20250807120937-61d086d36105 07 Aug 2025 none Apache-2.0 — Details →
v1.14.1-0.20250807120937-61d086d36105 07 Aug 2025 none Apache-2.0 — Details →
v0.0.0-20250806025606-b8300f07cbba 06 Aug 2025 none Apache-2.0 — Details →
v1.14.1-0.20250806025606-b8300f07cbba 06 Aug 2025 none Apache-2.0 — Details →
v0.0.0-20250804112229-8e9090a84be1 04 Aug 2025 none Apache-2.0 — Details →
v1.14.1-0.20250804112229-8e9090a84be1 04 Aug 2025 none Apache-2.0 — Details →
v0.0.0-20250730123121-e82d6fc3579e 30 Jul 2025 none Apache-2.0 — Details →
v1.14.1-0.20250730123121-e82d6fc3579e 30 Jul 2025 none — — Details →
v0.0.0-20250708085712-f51fac7a464f 08 Jul 2025 none — — Details →
v1.14.0 08 Jul 2025 none — — Details →
v1.14.0-rc1.0.20250708085712-f51fac7a464f 08 Jul 2025 none — — Details →
v1.14.0-rc1 19 Jun 2025 none — — Details →
v1.13.4-0.20250617075135-702ba102b465 17 Jun 2025 none — — Details →
v1.13.4-0.20250615173055-5c2186ca22ef 15 Jun 2025 none — — Details →
v1.13.4-0.20250615080456-9dc00881217b 15 Jun 2025 none — — Details →
v1.13.3 03 Jun 2025 none — — Details →
v1.13.3-0.20250603064230-5c88aa221671 03 Jun 2025 none — — Details →
v1.13.3-0.20250526115855-a5ac536f86e8 26 May 2025 none — — Details →
v1.13.3-0.20250428135526-779e170ea21d 28 Apr 2025 none — — Details →
v1.13.3-0.20250425115730-78bdbb6b3490 25 Apr 2025 none — — Details →
v1.13.3-0.20250421104927-07d1345ba162 21 Apr 2025 none — — Details →
v1.13.3-0.20250414030512-5b4862b0f9af 14 Apr 2025 none — — Details →
v1.12.2-0.20250411062654-ef147770321b 11 Apr 2025 none — — Details →
v1.13.3-0.20250408060225-d89a3415a7c7 08 Apr 2025 none — — Details →
v1.13.3-0.20250326071816-1b6ac947a802 26 Mar 2025 none — — Details →
v1.13.2 17 Mar 2025 none — — Details →
v1.13.2-0.20250317161404-28294cfa51d7 17 Mar 2025 none — — Details →

The newest 120 of 699 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/bytedance/sonic

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/bytedance/sonic

Is github.com/bytedance/sonic safe to use?

Vulert has no vulnerabilities on record for github.com/bytedance/sonic in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/bytedance/sonic's Vulert package health score?

Vulert scores github.com/bytedance/sonic 85/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/bytedance/sonic affected?

No. v1.15.4, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of github.com/bytedance/sonic should I use?

v1.15.4 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/bytedance/sonic have?

0 vulnerabilities are recorded for github.com/bytedance/sonic in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/bytedance/sonic vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/bytedance/sonic in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/bytedance/sonic are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/bytedance/sonic for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/bytedance/sonic version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.