Vulnerability Database · Go · Package report

github.com/charmbracelet/bubbletea/v2: vulnerability history, versions and safety

github.com/charmbracelet/bubbletea/v2 is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

Vulert verdict on github.com/charmbracelet/bubbletea/v2 v2.0.0-beta1 i

Updated on 23 Oct 2026

Good news: v2.0.0-beta1, the version you would install today, has no known vulnerabilities.

Package health score 80/100
  • Security Minor issues
  • Maintenance Maintaining
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Stay on v2.0.0-beta1 or newer. This can change: a vulnerability disclosed tomorrow can affect v2.0.0-beta1 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v2.0.0-beta1 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 45,475 i
  • OpenSSF scorecard 4/10 i
  • Last release 18 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/charmbracelet/bubbletea/v2, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v2.0.0-beta.6.0.20251104190126-b947ade70df8 04 Nov 2025 none MIT — Details →
v2.0.0-beta.6 30 Oct 2025 none MIT — Details →
v2.0.0-beta.5.0.20251030163446-d7c95b8a2778 30 Oct 2025 none MIT — Details →
v2.0.0-beta.5 22 Oct 2025 none MIT — Details →
v2.0.0-beta.4.0.20251016133824-8fc75165c195 16 Oct 2025 none MIT — Details →
v2.0.0-beta.4.0.20251016133621-78ff9b51fc6e 16 Oct 2025 none MIT — Details →
v2.0.0-beta.4.0.20251014190641-0c3e20421035 14 Oct 2025 none MIT — Details →
v2.0.0-beta.4.0.20251014165145-87f9a5916bfa 14 Oct 2025 none MIT — Details →
v2.0.0-20251011205917-3b687ffc1619 11 Oct 2025 none MIT — Details →
v2.0.0-beta.4.0.20251011205917-3b687ffc1619 11 Oct 2025 none MIT — Details →
v2.0.0-beta.4.0.20251001203853-2e341cf94b3d 01 Oct 2025 none MIT — Details →
v2.0.0-beta.4.0.20251001174938-1cbd575a469a 01 Oct 2025 none MIT — Details →
v2.0.0-beta.4.0.20250930175933-4cafc092c5e7 30 Sep 2025 none MIT — Details →
v2.0.0-beta.4.0.20250911202326-439500e8e5c1 11 Sep 2025 none MIT — Details →
v2.0.0-beta.4.0.20250910155747-997384b0b35e 10 Sep 2025 none MIT — Details →
v2.0.0-beta.4.0.20250909203628-59b04aaa4288 09 Sep 2025 none MIT — Details →
v2.0.0-beta.4.0.20250909203016-0db2eabd6d17 09 Sep 2025 none MIT — Details →
v2.0.0-beta.4.0.20250819191330-41ccf2c191b4 19 Aug 2025 none MIT — Details →
v2.0.0-beta.4.0.20250818201333-6c5845ae7a5f 18 Aug 2025 none MIT — Details →
v2.0.0-beta.4.0.20250813213544-5cc219db8892 13 Aug 2025 none MIT — Details →
v2.0.0-beta.4.0.20250813201422-d4d69f63338d 13 Aug 2025 none MIT — Details →
v2.0.0-beta.4.0.20250813192146-51804bc5f6a3 13 Aug 2025 none MIT — Details →
v2.0.0-beta.4.0.20250813191918-4ea1703d4181 13 Aug 2025 none MIT — Details →
v2.0.0-beta.4.0.20250810001659-4ef8837e7a0e 10 Aug 2025 none MIT — Details →
v2.0.0-beta.4.0.20250808190645-68df41d24270 08 Aug 2025 none MIT — Details →
v2.0.0-beta.4.0.20250806140618-ec08f6f335d1 06 Aug 2025 none MIT — Details →
v2.0.0-beta.4.0.20250805213652-b149293c83e0 05 Aug 2025 none MIT — Details →
v2.0.0-beta.4.0.20250805190305-70e94a2e0b2d 05 Aug 2025 none MIT — Details →
v2.0.0-beta.4.0.20250730211853-74a3890d5389 30 Jul 2025 none MIT — Details →
v2.0.0-beta.4.0.20250730165737-56ff7146d52d 30 Jul 2025 none MIT — Details →
v2.0.0-beta.4.0.20250724172607-5ba56e2bec69 24 Jul 2025 none MIT — Details →
v2.0.0-beta.4.0.20250722205912-875f5536287b 22 Jul 2025 none MIT — Details →
v2.0.0-beta.4.0.20250721205715-7684eeaf9cf4 21 Jul 2025 none MIT — Details →
v2.0.0-20250717140350-bb75e8f6b6ac 17 Jul 2025 none MIT — Details →
v2.0.0-beta.4.0.20250717140350-bb75e8f6b6ac 17 Jul 2025 none MIT — Details →
v2.0.0-20250710185017-3c0ffd25e595 10 Jul 2025 none MIT — Details →
v2.0.0-beta.4 10 Jul 2025 none MIT — Details →
v2.0.0-20250708152737-144080f3d891 08 Jul 2025 none MIT — Details →
v2.0.0-beta.3.0.20250707204238-911530d0a362 07 Jul 2025 none MIT — Details →
v2.0.0-beta.3.0.20250707162622-1b86faa5b94d 07 Jul 2025 none MIT — Details →
v2.0.0-beta.3.0.20250707152254-34f66cd5855b 07 Jul 2025 none MIT — Details →
v2.0.0-beta.3.0.20250617194119-3f1d09f7d826 17 Jun 2025 none MIT — Details →
v2.0.0-beta.3.0.20250609143341-c76fa36f1b94 09 Jun 2025 none MIT — Details →
v2.0.0-beta.3.0.20250609140610-65af983b4e31 09 Jun 2025 none MIT — Details →
v2.0.0-beta.3.0.20250602154956-43689cfc0174 02 Jun 2025 none MIT — Details →
v2.0.0-beta.3.0.20250602154534-5681225ad367 02 Jun 2025 none MIT — Details →
v2.0.0-beta.3.0.20250602154112-1e6aaa5c276e 02 Jun 2025 none MIT — Details →
v2.0.0-beta.3.0.20250530202231-ca493b9828d0 30 May 2025 none MIT — Details →
v2.0.0-beta.3.0.20250526132317-434f93986a5c 26 May 2025 none MIT — Details →
v2.0.0-beta.3.0.20250526132056-af1fcd396c77 26 May 2025 none MIT — Details →
v2.0.0-beta.3.0.20250525125602-c21475757ed4 25 May 2025 none MIT — Details →
v2.0.0-beta.3.0.20250525104940-a21ea413ab95 25 May 2025 none MIT — Details →
v2.0.0-beta.3.0.20250516162618-b152063fd274 16 May 2025 none MIT — Details →
v2.0.0-beta.3.0.20250505151056-185e28113f13 05 May 2025 none MIT — Details →
v2.0.0-beta.3 01 May 2025 none MIT — Details →
v2.0.0-beta.2 30 Apr 2025 none MIT — Details →
v2.0.0-beta.1.0.20250429151748-929ff5aaa7ef 29 Apr 2025 none MIT — Details →
v2.0.0-beta.1.0.20250424151446-bc94f3e7bf9f 24 Apr 2025 none MIT — Details →
v2.0.0-beta.1.0.20250420102230-7ecd51915026 20 Apr 2025 none MIT — Details →
v2.0.0-beta.1.0.20250331173400-ed4fde7ae48f 31 Mar 2025 none MIT — Details →
v2.0.0-beta.1.0.20250328000255-bf331300c52e 28 Mar 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250326181128-9c9f0231712a 26 Mar 2025 none MIT — Details →
v2.0.0-beta.1 26 Mar 2025 none MIT — Details →
v2.0.0-beta1 26 Mar 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250326152546-541aba001320 26 Mar 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250318133619-2ce107c85fed 18 Mar 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250312202230-2d77a6a1ac2a 12 Mar 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250310193130-955582a4efec 10 Mar 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250227150420-431cb5cd9f91 27 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250221141250-ac139a6889f1 21 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250213172939-705c75d7b8d2 13 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250213170538-cde486ce246d 13 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250212220348-3fc1c224d4b3 12 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250212173211-28e82b66f21c 12 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250211210552-12f6445fb2c4 11 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250211173506-ee3f886752ad 11 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250211164247-11e96ff54991 11 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250210220233-47166e9a7a60 10 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250210205835-09cb59acc028 10 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250210194358-468e1b3a41c7 10 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250206213209-b08648f203e0 06 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250206184642-5f91a4989782 06 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250206184610-cd30b7d2ac80 06 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250206183800-85c49152022e 06 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250206182425-809a91e86184 06 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250205152659-b81516a42226 05 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250204215433-d94dc6bb34d3 04 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250204175057-2a96bc438da6 04 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250203222705-2e91ec2235cd 03 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250203221512-86b0cb51691a 03 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250203141950-51536c04b0ef 03 Feb 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250131213215-96c871b934a4 31 Jan 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250128214736-a69f8566fb52 28 Jan 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250127205646-965f1394a8b3 27 Jan 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250127174605-b6d2e398de1b 27 Jan 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250123221453-5911fe2ff592 23 Jan 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250123211610-443afa6fa0c1 23 Jan 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250116142418-57f505c01b98 16 Jan 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250115153415-046a5ddf5b4a 15 Jan 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250114201644-43a5b4dd0af0 14 Jan 2025 none MIT — Details →
v2.0.0-alpha.2.0.20250114195238-30a5dd4e3496 14 Jan 2025 none — — Details →
v2.0.0-alpha.2.0.20250114183556-4f0e1e15a2b2 14 Jan 2025 none — — Details →
v2.0.0-alpha.2.0.20250114183054-9f703251e0d7 14 Jan 2025 none — — Details →
v2.0.0-alpha.2.0.20250113065744-e2768ff84369 13 Jan 2025 none — — Details →
v2.0.0-alpha.2.0.20250107111108-6231121defa8 07 Jan 2025 none — — Details →
v2.0.0-alpha.2.0.20241212195936-661482b5d4b6 12 Dec 2024 none — — Details →
v2.0.0-alpha.2.0.20241212184442-38ddd02f984e 12 Dec 2024 none — — Details →
v2.0.0-alpha.2.0.20241126192050-a8ed96118b08 26 Nov 2024 none — — Details →
v2.0.0-alpha.2.0.20241126171906-39712224a296 26 Nov 2024 none — — Details →
v2.0.0-alpha.2.0.20241121191216-1b7743e51209 21 Nov 2024 none — — Details →
v2.0.0-alpha.2.0.20241121171714-fbd5423ea935 21 Nov 2024 none — — Details →
v2.0.0-alpha.2.0.20241114171136-a07eb04402c5 14 Nov 2024 none — — Details →
v2.0.0-alpha.2.0.20241113134142-c71ad13e23d6 13 Nov 2024 none — — Details →
v2.0.0-alpha.2.0.20241112221357-f216d9854689 12 Nov 2024 none — — Details →
v2.0.0-alpha.2 12 Nov 2024 none — — Details →
v2.0.0-alpha.1.0.20241106193122-7b01292d0f80 06 Nov 2024 none — — Details →
v2.0.0-alpha.1.0.20241105155825-ead55032fd81 05 Nov 2024 none — — Details →
v2.0.0-alpha.1.0.20241031200731-4f70d4c680b8 31 Oct 2024 none — — Details →
v2.0.0-alpha.1.0.20241031180150-8f2d092f9aaa 31 Oct 2024 none — — Details →
v2.0.0-alpha.1.0.20241029003647-94b78737ffb3 29 Oct 2024 none — — Details →

The newest 120 of 135 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/charmbracelet/bubbletea/v2

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/charmbracelet/bubbletea/v2

Is github.com/charmbracelet/bubbletea/v2 safe to use?

Vulert has no vulnerabilities on record for github.com/charmbracelet/bubbletea/v2 in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/charmbracelet/bubbletea/v2's Vulert package health score?

Vulert scores github.com/charmbracelet/bubbletea/v2 80/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/charmbracelet/bubbletea/v2 affected?

No. v2.0.0-beta1, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of github.com/charmbracelet/bubbletea/v2 should I use?

v2.0.0-beta.6.0.20251104190126-b947ade70df8 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/charmbracelet/bubbletea/v2 have?

0 vulnerabilities are recorded for github.com/charmbracelet/bubbletea/v2 in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/charmbracelet/bubbletea/v2 vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/charmbracelet/bubbletea/v2 in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/charmbracelet/bubbletea/v2 are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/charmbracelet/bubbletea/v2 for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/charmbracelet/bubbletea/v2 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.