VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/canonical/pebble: vulnerability history, versions and safety

github.com/canonical/pebble is a package in the Go ecosystem. Vulert records 3 vulnerabilities for it across 120 releases, from Apr 2024 to Jun 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
3 vulnerabilities recorded M2 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/canonical/pebble vulnerabilities

Vulert verdict on github.com/canonical/pebble v1.33.2 i

Updated on 23 Oct 2026

Action needed: v1.33.2 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 78/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.33.2 — affected i
  • Vulnerabilities on record 3 over 1 year · 0 in the last year i
  • Latest disclosure 04 Jun 2024 i
  • Highest CVSS 6.5 i
  • With no published fix 0 i
  • Stars 213 i
  • OpenSSF scorecard 6/10 i
  • Last release this month i
  • Licence GPL-3.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/canonical/pebble, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.33.2-fips 21 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.2 21 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.2-0.20261021130036-d665124895bf 21 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.1 20 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.1-0.20261020112926-3a741f6f04ef 20 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.1-0.20261019214128-b9f374877b7c 19 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.1-0.20261016021624-c38903111e8e 16 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.1-0.20261014045802-8fa91b5bde81 14 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.1-0.20261013092606-f738aa715bc5 13 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.1-0.20261009040443-cf5f00bb66f2 09 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.1-0.20261009032209-7a3ac827ff79 09 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.1-0.20261008000857-f4032cf1a4ae 08 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.1-0.20261005223455-f15e3bbe8b4f 05 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.1-0.20261002013008-ba441eeb6985 02 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.1-0.20261001234138-429dd6984535 01 Oct 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.0-fips 28 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.1-0.20260928080949-e98676196d79 28 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.33.0 28 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v0.0.0-20260924010707-a5c23499f796 24 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260924010707-a5c23499f796 24 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260923070550-23e6a3cfb832 23 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260923043100-a6ba28eccff3 23 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260923021719-24e574efc56c 23 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260923010814-f62720fd9625 23 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260922235938-91a344d43f57 22 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260922230143-1039b9f5f4a5 22 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260922213531-257d92f4c449 22 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v0.0.0-20260918081225-694547711c98 18 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260918081225-694547711c98 18 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260917103413-275c8323d5ec 17 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260917061246-42123ac17ee1 17 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v0.0.0-20260916054946-0f9a812c523d 16 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260916054946-0f9a812c523d 16 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v0.0.0-20260915032705-a85f27b58ae5 15 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260915032705-a85f27b58ae5 15 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v0.0.0-20260913210540-65d5f05908b5 13 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260913210540-65d5f05908b5 13 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v0.0.0-20260910224454-69110ee6bab8 10 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260910224454-69110ee6bab8 10 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260910012953-8256e6b186fd 10 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.2-fips 09 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260909223120-9cb671ae7b3c 09 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.3-0.20260909043910-1be591fceccf 09 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.2 02 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.2-0.20260902232226-77072f4fd5c0 02 Sep 2026 M1 U1 GPL-3.0 Yes Details →
v0.0.0-20260830232048-5b8cd1071d8b 30 Aug 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.2-0.20260830232048-5b8cd1071d8b 30 Aug 2026 M1 U1 GPL-3.0 Yes Details →
v0.0.0-20260827012439-19ffbdb26115 27 Aug 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.2-0.20260827012439-19ffbdb26115 27 Aug 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.1 21 Jul 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.1-0.20260708003929-3eaca923204b 08 Jul 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.1-0.20260707035548-325e32312a04 07 Jul 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.1-0.20260706014309-3e8ee7be2fb9 06 Jul 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.1-0.20260702043127-c69b9fc563b7 02 Jul 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.0-fips 01 Jul 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.1-0.20260701022716-00cd18d2c9f4 01 Jul 2026 M1 U1 GPL-3.0 Yes Details →
v1.32.0 30 Jun 2026 M1 U1 GPL-3.0 Yes Details →
v1.31.1-0.20260630014312-f1de190247b6 30 Jun 2026 M1 U1 GPL-3.0 Yes Details →
v1.31.1-0.20260628222146-0c84907846de 28 Jun 2026 M1 U1 GPL-3.0 Yes Details →
v1.31.1-0.20260623033537-1dc4062bfd07 23 Jun 2026 M1 U1 GPL-3.0 Yes Details →
v1.31.1-0.20260623025026-404a641aa198 23 Jun 2026 M1 U1 GPL-3.0 Yes Details →
v1.31.1-0.20260617223327-d20e1fe5b914 17 Jun 2026 M1 U1 GPL-3.0 Yes Details →
v1.31.1-0.20260616050657-36f0c23dee99 16 Jun 2026 M1 U1 GPL-3.0 Yes Details →
v1.31.1-0.20260609005134-b43995f14533 09 Jun 2026 M1 U1 GPL-3.0 Yes Details →
v1.31.1-0.20260604005843-f83887ecff8f 04 Jun 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260603005329-9951ff5e131b 03 Jun 2026 M1 U1 GPL-3.0 Yes Details →
v1.31.1-0.20260603005329-9951ff5e131b 03 Jun 2026 M1 U1 GPL-3.0 Yes Details →
v1.31.1-0.20260602021854-2322e665a070 02 Jun 2026 M1 U1 GPL-3.0 Yes Details →
v1.31.1-0.20260531081036-864595d4b206 31 May 2026 M1 U1 GPL-3.0 Yes Details →
v1.31.0-fips 28 May 2026 M1 U1 GPL-3.0 Yes Details →
v1.31.0 28 May 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260526131702-a8a178f1007f 26 May 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260525002437-cefd15489301 25 May 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260524222351-048778c58d44 24 May 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260520020407-156637c9f9c9 20 May 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260511133134-cf11a6b46b30 11 May 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260507234406-c5251b7ccbae 07 May 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260504103049-b552a23136b5 04 May 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260424212409-6043d6e490e0 24 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-fips 24 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260423232240-c95612b0f69a 23 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1 16 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260416033031-a4660539536d 16 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260416020904-850aaf32ec5d 16 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260416012205-986316294e7b 16 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260414214420-5dc5f8a1056d 14 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260413222037-4869198021df 13 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260413192426-5959e742e6c4 13 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260410235347-692c2f5c3ea9 10 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260408223326-ccd6c0c49b95 08 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260407225646-ace18d410901 07 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260407072458-1c0cfb2949a1 07 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260406231720-5b4a0331f983 06 Apr 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260330223634-7ac34b099241 30 Mar 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260330040938-d2fb512567bd 30 Mar 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.1-0.20260330033125-df9d2ecf5943 30 Mar 2026 M1 U1 GPL-3.0 Yes Details →
v1.30.0 29 Mar 2026 M1 U1 GPL-3.0 Yes Details →
v1.29.1-0.20260326231937-5c2e28182761 26 Mar 2026 M1 U1 GPL-3.0 Yes Details →
v1.29.1-0.20260325231029-d4c6971bd764 25 Mar 2026 M1 U1 GPL-3.0 Yes Details →
v1.29.1-0.20260324032044-7828d3ee8a63 24 Mar 2026 M1 U1 GPL-3.0 Yes Details →
v1.29.1-0.20260320034907-190789196fb0 20 Mar 2026 M1 U1 — Yes Details →
v1.29.1-0.20260319224956-79f2f8ca6926 19 Mar 2026 M1 U1 — Yes Details →
v1.29.1-0.20260312231210-06cbadf8a21e 12 Mar 2026 M1 U1 — Yes Details →
v1.29.0-fips 25 Feb 2026 M1 U1 — Yes Details →
v1.29.0 25 Feb 2026 M1 U1 — Yes Details →
v1.28.1-0.20260216033928-be1ab0378158 16 Feb 2026 M1 U1 — Yes Details →
v1.28.1-0.20260204213929-c0f41ff63f1f 04 Feb 2026 M1 U1 — Yes Details →
v1.28.1-0.20260203200816-a48453f8a0be 03 Feb 2026 M1 U1 — Yes Details →
v1.28.1-0.20260201203928-7e8e6bf44d38 01 Feb 2026 M1 U1 — Yes Details →
v1.28.1-0.20260130041038-5f7c231ad5ef 30 Jan 2026 M1 U1 — Yes Details →
v1.28.0-fips 29 Jan 2026 M1 U1 — Yes Details →
v1.28.0 29 Jan 2026 M1 U1 — Yes Details →
v1.27.1-0.20260115224613-f7589e55ec59 15 Jan 2026 M1 U1 — Yes Details →
v1.27.1-0.20260115003822-1cf9ab8b3721 15 Jan 2026 M1 U1 — Yes Details →
v1.27.1-0.20260113175405-435516a8cd6d 13 Jan 2026 M1 U1 — Yes Details →
v1.27.1-0.20260113001914-659551f9f2bc 13 Jan 2026 M1 U1 — Yes Details →
v1.27.1-0.20260112203855-50a92b37d37b 12 Jan 2026 M1 U1 — Yes Details →
v1.27.1-0.20260107233137-484731323ed7 07 Jan 2026 M1 U1 — Yes Details →
v1.27.1-0.20260105091149-00aacebcdf9a 05 Jan 2026 M1 U1 — Yes Details →
v1.27.1-0.20260104194137-1eae140bd9ce 04 Jan 2026 M1 U1 — Yes Details →

The newest 120 of 508 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 3

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 3 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/canonical/pebble

The 3 most severe of 3 vulnerabilities recorded for this package

Search all 3 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2024-3250: Pebble service manager's file pull API allows access by any user 6.5 medium 1.4.2 05 Apr 2024
Duplicate Advisory: Pebble service manager's file pull API allows access by any user 6.5 medium 1.1.1 04 Apr 2024
CVE-2024-3250: Pebble service manager's file pull API allows unauthorized access N/A unrated 1.1.1 04 Jun 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/canonical/pebble

Is github.com/canonical/pebble safe to use?

Vulert records 3 vulnerabilities for github.com/canonical/pebble in Go: 0 critical, 0 high, 2 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/canonical/pebble's Vulert package health score?

Vulert scores github.com/canonical/pebble 78/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/canonical/pebble affected?

Yes. v1.33.2, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does github.com/canonical/pebble have?

3 vulnerabilities are recorded for github.com/canonical/pebble in the Go ecosystem: 0 critical, 0 high, 2 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/canonical/pebble vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/canonical/pebble in the last 12 months, and the oldest entry in this database dates to 04 Apr 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/canonical/pebble are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/canonical/pebble for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/canonical/pebble version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.