VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/charmbracelet/charm: vulnerability history, versions and safety

github.com/charmbracelet/charm is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 0 release, from May 2022 to Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded C1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/charmbracelet/charm vulnerabilities

Vulert verdict on github.com/charmbracelet/charm v0.12.6 i

Updated on 23 Oct 2026

Good news: v0.12.6, the version you would install today, has no known vulnerabilities. Older releases do — the table below lists all 2.

Package health score 69/100
  • Security Minor issues
  • Maintenance Maintaining
  • Popularity Key ecosystem project
  • Community Quiet

What to do: Stay on v0.12.6 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.12.6 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v0.12.6 — unaffected i
  • Vulnerabilities on record 2 over 2 years · 0 in the last year i
  • Latest disclosure 21 Aug 2024 i
  • Highest CVSS 9.8 i
  • With no published fix 0 i
  • Stars 2,487 i
  • OpenSSF scorecard 4/10 i
  • Last release 38 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/charmbracelet/charm, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.12.7-0.20250224110623-aff3071de28b 24 Feb 2025 none MIT — Details →
v0.12.7-0.20241211235102-bdad2a75d020 11 Dec 2024 none MIT — Details →
v0.12.7-0.20240913173623-6eee9bc5a683 13 Sep 2024 none MIT — Details →
v0.12.7-0.20240823200409-c8a10ca35a9f 23 Aug 2024 none MIT — Details →
v0.12.7-0.20240611121908-2785ee19555c 11 Jun 2024 none MIT — Details →
v0.12.7-0.20240313215801-f74c9056100f 13 Mar 2024 none MIT — Details →
v0.12.7-0.20240304204129-222ae769592e 04 Mar 2024 none MIT — Details →
v0.12.7-0.20230905122634-47448ea01c9b 05 Sep 2023 none MIT — Details →
v0.12.6 26 Jul 2023 none MIT — Details →
v0.12.6-0.20230512180849-a813d33338c1 12 May 2023 none MIT — Details →
v0.8.7 06 May 2023 none MIT — Details →
v0.8.7-0.20230506090221-6aae6f515462 06 May 2023 none MIT — Details →
v0.12.6-0.20230505182418-55baef70f01e 05 May 2023 none MIT — Details →
v0.12.5 21 Feb 2023 none MIT — Details →
v0.12.5-0.20220907085158-1cf32a6fcaff 07 Sep 2022 none MIT — Details →
v0.12.5-0.20220907085152-2f8140225dae 07 Sep 2022 none MIT — Details →
v0.12.5-0.20220901135017-afd8987f6353 01 Sep 2022 none MIT — Details →
v0.12.5-0.20220824223627-011c9bb6ea1d 24 Aug 2022 none MIT — Details →
v0.12.5-0.20220824223627-0c540a489054 24 Aug 2022 none MIT — Details →
v0.12.5-0.20220824223627-21ed0cc55c32 24 Aug 2022 none MIT — Details →
v0.12.5-0.20220824223627-29ea044066d6 24 Aug 2022 none MIT — Details →
v0.12.5-0.20220824223627-3c76e45c87a1 24 Aug 2022 none MIT — Details →
v0.12.5-0.20220824223627-48846318135a 24 Aug 2022 none MIT — Details →
v0.12.5-0.20220824223627-9519145c0989 24 Aug 2022 none MIT — Details →
v0.12.5-0.20220824223627-b61c34aec057 24 Aug 2022 none MIT — Details →
v0.12.5-0.20220823140448-6e399e9a86f1 23 Aug 2022 none MIT — Details →
v0.12.5-0.20220822132818-acb8596a93f4 22 Aug 2022 none MIT — Details →
v0.12.4 15 Aug 2022 none MIT — Details →
v0.12.4-0.20220811145923-4000a19560f3 11 Aug 2022 none MIT — Details →
v0.12.4-0.20220810211846-a9fa8cb125f0 10 Aug 2022 none MIT — Details →
v0.12.4-0.20220810205056-6190d03ad0fd 10 Aug 2022 none MIT — Details →
v0.12.3 09 Aug 2022 none MIT — Details →
v0.12.3-0.20220809221715-5681608c48c3 09 Aug 2022 none MIT — Details →
v0.12.3-0.20220809221642-589f38f02b57 09 Aug 2022 none MIT — Details →
v0.12.3-0.20220809221618-b74f1c1aae86 09 Aug 2022 none MIT — Details →
v0.12.3-0.20220809221105-9d68e51527f1 09 Aug 2022 none MIT — Details →
v0.12.3-0.20220809221052-be343b24db83 09 Aug 2022 none MIT — Details →
v0.12.3-0.20220809221044-17e415de93d6 09 Aug 2022 none MIT — Details →
v0.12.3-0.20220809221029-a0c7c13a163a 09 Aug 2022 none MIT — Details →
v0.12.3-0.20220809220740-50ca76690612 09 Aug 2022 none MIT — Details →
v0.12.2 09 Aug 2022 none MIT — Details →
v0.12.2-0.20220809214220-4a868895d883 09 Aug 2022 none MIT — Details →
v0.12.2-0.20220809211144-de0321458ebe 09 Aug 2022 none MIT — Details →
v0.12.2-0.20220803203609-2c2f877f5b65 03 Aug 2022 none MIT — Details →
v0.12.2-0.20220727192534-4ad87a1cae63 27 Jul 2022 none MIT — Details →
v0.12.2-0.20220725215645-f72401a42a76 25 Jul 2022 none MIT — Details →
v0.12.2-0.20220725215011-b50d82da4463 25 Jul 2022 none MIT — Details →
v0.12.2-0.20220722183127-2ed6678cac5f 22 Jul 2022 none MIT — Details →
v0.12.2-0.20220708182526-4009f108214b 08 Jul 2022 none MIT — Details →
v0.12.2-0.20220708150735-65369c0e9fb6 08 Jul 2022 none MIT — Details →
v0.12.2-0.20220707180123-aabe2c82a54f 07 Jul 2022 none MIT — Details →
v0.12.2-0.20220705154323-b538bb66580b 05 Jul 2022 none MIT — Details →
v0.12.2-0.20220617231449-d68dd0e119c4 17 Jun 2022 none MIT — Details →
v0.12.2-0.20220617231340-8f50bd52a2ec 17 Jun 2022 none MIT — Details →
v0.12.2-0.20220614181726-eb256bcf11c8 14 Jun 2022 none MIT — Details →
v0.12.2-0.20220516163027-550793160c7b 16 May 2022 none MIT — Details →
v0.12.2-0.20220516144931-ea3644f6b042 16 May 2022 none MIT — Details →
v0.12.2-0.20220513161359-8a25ec059ce3 13 May 2022 none MIT — Details →
v0.12.2-0.20220512174935-dab882a1940f 12 May 2022 none MIT — Details →
v0.12.2-0.20220512174335-0e373f773ce5 12 May 2022 none MIT — Details →
v0.12.2-0.20220512165022-7ec8c9051d4c 12 May 2022 none MIT — Details →
v0.12.2-0.20220511152816-be61ff8c231b 11 May 2022 none MIT — Details →
v0.12.2-0.20220511152759-7b57973ca0b5 11 May 2022 none MIT — Details →
v0.12.2-0.20220511152646-78435a1efd9e 11 May 2022 none MIT — Details →
v0.12.2-0.20220511110048-0694ae9fc0d7 11 May 2022 none MIT — Details →
v0.12.2-0.20220511110048-1d6b9e98b744 11 May 2022 none MIT — Details →
v0.12.2-0.20220511110048-285e2ac91598 11 May 2022 none MIT — Details →
v0.12.2-0.20220511110048-69c9ffb51772 11 May 2022 none MIT — Details →
v0.12.2-0.20220511110048-6bc0cd249583 11 May 2022 none MIT — Details →
v0.12.2-0.20220511110048-80cb7c751149 11 May 2022 none MIT — Details →
v0.12.2-0.20220511110048-82874922850c 11 May 2022 none MIT — Details →
v0.12.2-0.20220511110048-9760709ec900 11 May 2022 none MIT — Details →
v0.12.2-0.20220511110048-a826d055efde 11 May 2022 none MIT — Details →
v0.12.2-0.20220511110048-c58eeab79a67 11 May 2022 none MIT — Details →
v0.12.2-0.20220511110048-d24d86d14b72 11 May 2022 none MIT — Details →
v0.12.2-0.20220511110048-da80076f1781 11 May 2022 none MIT — Details →
v0.12.2-0.20220511110047-3dc23b1bd0a0 11 May 2022 none MIT — Details →
v0.12.2-0.20220510200125-8ed3fa056398 10 May 2022 none MIT — Details →
v0.12.2-0.20220510185551-b748af7ac8ab 10 May 2022 none MIT — Details →
v0.12.2-0.20220510182820-9ecb597194e6 10 May 2022 none MIT — Details →
v0.12.2-0.20220510160856-32e05979b871 10 May 2022 none MIT — Details →
v0.12.2-0.20220510160856-8ca44b78fac0 10 May 2022 none MIT — Details →
v0.12.2-0.20220510160856-d1e9596b8d1d 10 May 2022 none MIT — Details →
v0.12.2-0.20220510124954-6f4f8580f9f9 10 May 2022 none MIT — Details →
v0.12.2-0.20220510005005-53ca339681c5 10 May 2022 none MIT — Details →
v0.12.2-0.20220510004113-075fe60b4908 10 May 2022 none MIT — Details →
v0.12.2-0.20220509210734-2b34f70b4f49 09 May 2022 none MIT — Details →
v0.12.2-0.20220509210734-2e4483ce4f74 09 May 2022 none MIT — Details →
v0.12.2-0.20220509210734-54ddb103806c 09 May 2022 none MIT — Details →
v0.12.2-0.20220509210734-5dcd2ddbfb30 09 May 2022 none MIT — Details →
v0.12.2-0.20220509210734-641721b8c541 09 May 2022 none MIT — Details →
v0.12.2-0.20220509210734-b80f8fa487c9 09 May 2022 none MIT — Details →
v0.12.2-0.20220509210734-d8a78d397f93 09 May 2022 none MIT — Details →
v0.12.2-0.20220509210733-66648d20f325 09 May 2022 none MIT — Details →
v0.12.2-0.20220509210733-d7a6dba1a862 09 May 2022 none MIT — Details →
v0.12.2-0.20220509210730-70f351e16c6c 09 May 2022 none MIT — Details →
v0.12.2-0.20220509181459-23e8d071cd41 09 May 2022 none MIT — Details →
v0.12.2-0.20220509181411-0bce4165bdde 09 May 2022 none MIT — Details →
v0.12.2-0.20220509171422-1662edd95aff 09 May 2022 none MIT — Details →
v0.12.2-0.20220509155900-40e9a3cf849c 09 May 2022 none MIT — Details →
v0.12.2-0.20220509150426-968ce883544f 09 May 2022 none — — Details →
v0.12.2-0.20220509143106-012506492d89 09 May 2022 none — — Details →
v0.12.2-0.20220506152924-09bf5bc65329 06 May 2022 none — — Details →
v0.12.1-0.20220506152511-0e7f8c51a28e 06 May 2022 none — — Details →
v0.12.1 06 May 2022 none — — Details →
v0.12.1-0.20220506025229-3c90668f955c 06 May 2022 none — — Details →
v0.12.1-0.20220506024131-9c620ae07e7f 06 May 2022 none — — Details →
v0.12.1-0.20220506021703-f2e1eeee3f00 06 May 2022 none — — Details →
v0.12.1-0.20220506012318-e855272b2bb7 06 May 2022 none — — Details →
v0.12.1-0.20220505193049-d95b095f8e52 05 May 2022 none — — Details →
v0.12.1-0.20220505190501-23e8c2d7f93c 05 May 2022 none — — Details →
v0.12.1-0.20220505144535-70baa552690a 05 May 2022 none — — Details →
v0.12.1-0.20220505144501-e9ff10fa41d6 05 May 2022 none — — Details →
v0.12.1-0.20220505144244-2f49ba81c2ec 05 May 2022 none — — Details →
v0.12.1-0.20220505020120-3b64fbdcbaa7 05 May 2022 none — — Details →
v0.12.1-0.20220504121359-b57cebf5e9bb 04 May 2022 none — — Details →
v0.12.1-0.20220504121341-708d54f30b75 04 May 2022 none — — Details →
v0.12.1-0.20220504121305-7977c9888ba3 04 May 2022 none — — Details →
v0.12.1-0.20220504121202-79ff986e86c1 04 May 2022 none — — Details →
v0.12.1-0.20220504011145-e5472a07c934 04 May 2022 none — — Details →

The newest 120 of 421 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 1
  • 2024 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/charmbracelet/charm

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2022-29180: Server-Side Request Forgery in charm 9.8 critical 0.12.1 24 May 2022
Server-Side Request Forgery in charm N/A unrated 0.12.1 21 Aug 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/charmbracelet/charm

Is github.com/charmbracelet/charm safe to use?

Vulert records 2 vulnerabilities for github.com/charmbracelet/charm in Go: 1 critical, 0 high, 0 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/charmbracelet/charm's Vulert package health score?

Vulert scores github.com/charmbracelet/charm 69/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/charmbracelet/charm affected?

No. v0.12.6, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of github.com/charmbracelet/charm should I use?

v0.12.6 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/charmbracelet/charm have?

2 vulnerabilities are recorded for github.com/charmbracelet/charm in the Go ecosystem: 1 critical, 0 high, 0 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/charmbracelet/charm vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/charmbracelet/charm in the last 12 months, and the oldest entry in this database dates to 24 May 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/charmbracelet/charm are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/charmbracelet/charm for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/charmbracelet/charm version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.