Vulnerability Database · Go · Package report
github.com/caarlos0/env/v6: vulnerability history, versions and safety
github.com/caarlos0/env/v6 is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/caarlos0/env/v6 v6.10.1 i
Updated on 23 Oct 2026
Good news: v6.10.1, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Unmaintained
- Popularity Key ecosystem project
- Community Moderate
What to do: Stay on v6.10.1 or newer. This can change: a vulnerability disclosed tomorrow can affect v6.10.1 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v6.10.1 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 6,340 i
- OpenSSF scorecard 5/10 i
- Last release 49 months ago i
- Licence MIT i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/caarlos0/env/v6, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v6.10.2-0.20230107201639-da848aabc7dc 07 Jan 2023
- v6.10.2-0.20230106191525-bf3ab9f3ce48 06 Jan 2023
- v6.10.2-0.20230103005814-23c6da159293 03 Jan 2023
- v6.10.2-0.20221214124132-c159c5db061e 14 Dec 2022
- v6.10.2-0.20221115202516-877e1bfe5d9a 15 Nov 2022
- v6.10.1 12 Sep 2022
- v6.10.0 22 Aug 2022
- v6.9.4-0.20220802121232-4c93d8101263 02 Aug 2022
- v6.9.4-0.20220719004013-60b5226da3e5 19 Jul 2022
- v6.9.4-0.20220713114417-439dbad60f36 13 Jul 2022
- v6.9.3 30 May 2022
- v6.9.3-0.20220523115923-512d9f8eb6cf 23 May 2022
- v6.9.2 12 May 2022
- v6.9.2-0.20220427142048-863e59d4f5a5 27 Apr 2022
- v6.9.2-0.20220411113837-17c9f013f1f5 11 Apr 2022
- v6.9.2-0.20220406123750-832c913318cc 06 Apr 2022
- v6.9.2-0.20220322225201-f5f5706f876d 22 Mar 2022
- v6.9.2-0.20220302121529-5f713e601dec 02 Mar 2022
- v6.9.2-0.20220225114608-25258707971d 25 Feb 2022
- v6.9.2-0.20220113231600-8eb2e726db15 13 Jan 2022
- v6.9.2-0.20220113144636-92ee88e46848 13 Jan 2022
- v6.9.2-0.20211230130351-ab39487bf2cb 30 Dec 2021
- v6.9.1 30 Dec 2021
- v6.9.1-0.20211230123239-66696b36d250 30 Dec 2021
- v6.9.0 29 Dec 2021
- v6.8.0 01 Dec 2021
- v6.0.0-20211130132029-d8dc27c89642 30 Nov 2021
- v6.7.3-0.20211130132029-d8dc27c89642 30 Nov 2021
- v6.7.3-0.20211109131905-2cf397a58a36 09 Nov 2021
- v6.7.2 15 Oct 2021
- v6.7.2-0.20211015204913-adc0f6371c9f 15 Oct 2021
- v6.7.2-0.20211015204718-e508d58306c7 15 Oct 2021
- v6.7.2-0.20211015191130-db06a3f34474 15 Oct 2021
- v6.7.2-0.20210915184520-d2550013e8b1 15 Sep 2021
- v6.7.1 06 Sep 2021
- v6.7.1-0.20210902204008-a67025755193 02 Sep 2021
- v6.7.0 30 Aug 2021
- v6.6.3-0.20210813172939-002d5ea1592d 13 Aug 2021
- v6.6.3-0.20210811023553-ed139cd8f942 11 Aug 2021
- v6.6.3-0.20210810135257-53ff073e9f57 10 Aug 2021
- v6.6.3-0.20210810125832-92ab40454ca8 10 Aug 2021
- v6.6.3-0.20210720123634-929e30efea34 20 Jul 2021
- v6.1.1-0.20210530161913-48e4777619cf 30 May 2021
- v6.6.2 30 May 2021
- v6.6.1 30 May 2021
- v6.6.0 15 May 2021
- v6.5.1-0.20210512182935-9a4342d20cb5 12 May 2021
- v6.5.1-0.20210413124024-346d77c65dc7 13 Apr 2021
- v6.5.1-0.20210405113455-d80f61db1a53 05 Apr 2021
- v6.5.1-0.20210310124413-41425b4f3d76 10 Mar 2021
- v6.5.1-0.20210309172413-3de7ad1d80a8 09 Mar 2021
- v6.5.1-0.20210208123351-f2ced39044a6 08 Feb 2021
- v6.5.0 01 Feb 2021
- v6.4.1-0.20210201124950-2ed4d368b74a 01 Feb 2021
- v6.4.1-0.20210125215145-aa840922023e 25 Jan 2021
- v6.4.1-0.20210114113342-80e991b3f57d 14 Jan 2021
- v6.4.1-0.20210106144350-54c9d5ea67d2 06 Jan 2021
- v6.4.1-0.20210105113443-e8a3637ce06f 05 Jan 2021
- v6.4.1-0.20201222195935-9d5880bdfd02 22 Dec 2020
- v6.4.1-0.20201218112634-c07b81b92127 18 Dec 2020
- v6.4.1-0.20201215134734-e1bf074e34e4 15 Dec 2020
- v6.4.1-0.20201117142602-a51f50c25c06 17 Nov 2020
- v6.3.1-0.20200821200157-07535a54dc17 21 Aug 2020
- v6.4.0 21 Aug 2020
- v6.3.1-0.20200818121528-10b2f0b05f54 18 Aug 2020
- v6.3.1-0.20200723124730-0499224e0e77 23 Jul 2020
- v6.3.1-0.20200712182401-52290f9d615e 12 Jul 2020
- v6.3.1-0.20200702111649-93d3e6ebde87 02 Jul 2020
- v6.3.1-0.20200623185855-3ac02fe599bb 23 Jun 2020
- v6.3.0 23 Jun 2020
- v6.2.2 26 Apr 2020
- v6.2.1 26 Feb 2020
- v6.2.0 24 Feb 2020
- v6.1.1-0.20191010115149-6cef6a7f8b01 10 Oct 2019
- v6.1.1-0.20191008180733-d8b6122e7b90 08 Oct 2019
- v6.1.0 03 Oct 2019
- v6.0.1-0.20190724155928-f394d0b236ef 24 Jul 2019
- v6.0.0 15 May 2019
- v6.0.0-20190515020715-4bd75bf16b9e 15 May 2019
All 79 versions Vulert tracks for this package. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/caarlos0/env/v6
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/caarlos0/env/v6
Is github.com/caarlos0/env/v6 safe to use?
Vulert has no vulnerabilities on record for github.com/caarlos0/env/v6 in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/caarlos0/env/v6's Vulert package health score?
Vulert scores github.com/caarlos0/env/v6 65/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/caarlos0/env/v6 affected?
No. v6.10.1, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of github.com/caarlos0/env/v6 should I use?
v6.10.1 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does github.com/caarlos0/env/v6 have?
0 vulnerabilities are recorded for github.com/caarlos0/env/v6 in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/caarlos0/env/v6 vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/caarlos0/env/v6 in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/caarlos0/env/v6 are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/caarlos0/env/v6 for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/caarlos0/env/v6 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.