VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/cilium/hubble: vulnerability history, versions and safety

github.com/cilium/hubble is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, first recorded in May 2025. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded M1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/cilium/hubble vulnerabilities

Vulert verdict on github.com/cilium/hubble v1.20.2 i

Updated on 23 Oct 2026

Action needed: v1.20.2 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 84/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.20.2 — affected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 23 May 2025 i
  • Highest CVSS 5.3 i
  • With no published fix 0 i
  • Stars 4,370 i
  • OpenSSF scorecard 4/10 i
  • Last release this month i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/cilium/hubble, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.20.3-0.20261008100303-81a5c2a57d6d 08 Oct 2026 M1 U1 Apache-2.0 Yes Details →
v1.20.2 01 Oct 2026 M1 U1 Apache-2.0 Yes Details →
v1.19.5-0.20260911001509-32b30e041403 11 Sep 2026 M1 U1 Apache-2.0 Yes Details →
v1.19.5-0.20260824160552-a6d97429dbfb 24 Aug 2026 M1 U1 Apache-2.0 Yes Details →
v1.19.5-0.20260714152151-ff5e648524d7 14 Jul 2026 M1 U1 Apache-2.0 Yes Details →
v1.19.4 05 Jun 2026 M1 U1 Apache-2.0 Yes Details →
v1.19.3 21 Apr 2026 M1 U1 Apache-2.0 Yes Details →
v1.18.6 05 Feb 2026 M1 U1 Apache-2.0 Yes Details →
v1.18.5 06 Jan 2026 M1 U1 Apache-2.0 Yes Details →
v1.18.4-0.20251111075259-dfb30764fc3b 11 Nov 2025 M1 U1 Apache-2.0 Yes Details →
v1.18.4-0.20251104085353-1b7c2c8bd14f 04 Nov 2025 M1 U1 Apache-2.0 Yes Details →
v1.18.4-0.20251028092613-3980dafd27d7 28 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v1.18.3 24 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v1.18.1-0.20250812144255-d96d96daed18 12 Aug 2025 M1 U1 Apache-2.0 Yes Details →
v1.18.0 11 Aug 2025 M1 U1 Apache-2.0 Yes Details →
v1.17.6-0.20250624072730-26c54014065e 24 Jun 2025 M1 U1 Apache-2.0 Yes Details →
v1.17.6-0.20250623102325-2be09cf40366 23 Jun 2025 M1 U1 Apache-2.0 Yes Details →
v1.17.5 23 Jun 2025 M1 U1 Apache-2.0 Yes Details →
v1.17.3 30 Apr 2025 M1 U1 Apache-2.0 Yes Details →
v0.0.0-20250401205418-aba36c0053dc 01 Apr 2025 M1 U1 Apache-2.0 Yes Details →
v1.17.2 01 Apr 2025 M1 U1 Apache-2.0 Yes Details →
v1.17.1 12 Feb 2025 M1 U1 Apache-2.0 Yes Details →
v1.17.0 07 Feb 2025 M1 U1 Apache-2.0 Yes Details →
v1.16.6 22 Jan 2025 M1 U1 Apache-2.0 Yes Details →
v1.16.5 18 Dec 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.5-0.20241206054934-cc4bf3c6df4a 06 Dec 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.5-0.20241206023429-9d25bf3a19c9 06 Dec 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.5-0.20241202103413-82faf4e1cd69 02 Dec 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.5-0.20241122082600-87b6d8d1e3e6 22 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.4 21 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.4-0.20241115065038-c4803aec8d4c 15 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.4-0.20241111071019-60dd46276749 11 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.4-0.20241028223712-121b7949ed42 28 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.3 28 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.3-0.20241025232520-fd0a385bfc79 25 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.2 04 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.2-0.20240927135238-079d99091739 27 Sep 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.2-0.20240913062240-3fc58f504bff 13 Sep 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.2-0.20240912160449-fa9728e35887 12 Sep 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.1 12 Sep 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.1-0.20240902144430-b59a53aed3e9 02 Sep 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0 25 Jul 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0-pre.3.0.20240719084524-0a2715e2de3f 19 Jul 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0-pre.3.0.20240718205427-7c202da1e0b4 18 Jul 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.6 18 Jul 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0-pre.3.0.20240712074814-c46ed53b9635 12 Jul 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0-pre.3.0.20240709153156-b5ba1601857b 09 Jul 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0-pre.3.0.20240616054637-6cffbdf5afec 16 Jun 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0-pre.3 08 Jun 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.5 05 Jun 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0-pre.2.0.20240605091845-25cdf8b8cc7b 05 Jun 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0-pre.2.0.20240524092647-134043676ec2 24 May 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0-pre.2.0.20240524062920-b747c6ffc42a 24 May 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0-pre.2.0.20240517072659-1c709f857130 17 May 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0-pre.2.0.20240514081612-1a58521d34f4 14 May 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.4 13 May 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0-pre.2.0.20240510160651-360a8fec1518 10 May 2024 M1 U1 Apache-2.0 Yes Details →
v1.16.0-pre.2 07 May 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.7-0.20240417231306-6173b312d976 17 Apr 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.7-0.20240417175338-9245c5af2535 17 Apr 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.7-0.20240417165117-8a85e46f8259 17 Apr 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.3 17 Apr 2024 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20240412040733-dbdf7143ee7f 12 Apr 2024 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20240313060716-49e0dbd9b657 13 Mar 2024 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20240311213225-b08233369d53 11 Mar 2024 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20240311190428-e225f8d6f257 11 Mar 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.2 11 Mar 2024 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20240311173506-2dac4fd97b21 11 Mar 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.1 08 Mar 2024 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20240308190653-74d41ad8c231 08 Mar 2024 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20240223172256-c8dc4decbc55 23 Feb 2024 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20240216212551-9d5ce917565f 16 Feb 2024 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20240202074113-8f7ee5031624 02 Feb 2024 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20240129135134-40ec40f30085 29 Jan 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.0 15 Jan 2024 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20240115091255-21ed83a14afd 15 Jan 2024 M1 U1 Apache-2.0 Yes Details →
v0.12.3 08 Dec 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20231208073032-af145f8dde40 08 Dec 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20231124025644-2e199b4fef64 24 Nov 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20231115130804-7197f9e3a451 15 Nov 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20231012144221-da8396d750db 12 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.12.2 12 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20231012080334-0c30b592d6c1 12 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20231011144437-47bdfe268741 11 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20231011100814-a86f64bd406a 11 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.12.1 11 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20230929121040-9c361e18dc06 29 Sep 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20230710171507-8c10f5117dee 10 Jul 2023 M1 U1 Apache-2.0 Yes Details →
v0.12.0 10 Jul 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20230710133926-9feee533134b 10 Jul 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20230612094654-e715ad1d5738 12 Jun 2023 M1 U1 Apache-2.0 Yes Details →
v0.11.6 07 Jun 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20230607160914-5dc27363a017 07 Jun 2023 M1 U1 Apache-2.0 Yes Details →
v0.11.5 08 May 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20230505073536-1980d391b424 05 May 2023 M1 U1 Apache-2.0 Yes Details →
v0.11.4 25 Apr 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20230424083300-f5469f014b26 24 Apr 2023 M1 U1 Apache-2.0 Yes Details →
v0.11.3 15 Mar 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20230315080929-01604c3db4a0 15 Mar 2023 M1 U1 Apache-2.0 Yes Details →
v0.8.1-0.20230306095252-4afe5205910d 06 Mar 2023 M1 U1 Apache-2.0 Yes Details →
v0.11.2 15 Feb 2023 M1 U1 — Yes Details →
v0.8.1-0.20230213110955-85fa3a55fcfd 13 Feb 2023 M1 U1 — Yes Details →
v0.11.1 24 Jan 2023 M1 U1 — Yes Details →
v0.8.1-0.20230124164502-221b8eade18c 24 Jan 2023 M1 U1 — Yes Details →
v0.8.1-0.20230112074838-2c7ee948da93 12 Jan 2023 M1 U1 — Yes Details →
v0.8.1-0.20230111170248-973244d651e0 11 Jan 2023 M1 U1 — Yes Details →
v0.11.0 11 Jan 2023 M1 U1 — Yes Details →
v0.8.1-0.20230111134434-a12da7376e67 11 Jan 2023 M1 U1 — Yes Details →
v0.8.1-0.20230105173802-ebf353ebdb69 05 Jan 2023 M1 U1 — Yes Details →
v0.8.1-0.20220802141741-c91443379b49 02 Aug 2022 M1 U1 — Yes Details →
v0.8.1-0.20220718092307-abec329ac330 18 Jul 2022 M1 U1 — Yes Details →
v0.8.1-0.20220711145555-1ae3fab6609e 11 Jul 2022 M1 U1 — Yes Details →
v0.10.0 22 Jun 2022 M1 U1 — Yes Details →
v0.8.1-0.20220622082222-612202fadd55 22 Jun 2022 M1 U1 — Yes Details →
v0.8.1-0.20220615183455-4d51e2a9c3bb 15 Jun 2022 M1 U1 — Yes Details →
v0.8.1-0.20220517153140-a34780d85ce7 17 May 2022 M1 U1 — Yes Details →
v0.8.1-0.20220513171533-f7c66ccffbf7 13 May 2022 M1 U1 — Yes Details →
v0.8.1-0.20220509075114-b0829a84ac93 09 May 2022 M1 U1 — Yes Details →
v0.8.1-0.20220502101119-096f721cd2ae 02 May 2022 M1 U1 — Yes Details →
v0.8.1-0.20220502053534-6b2ad0e63332 02 May 2022 M1 U1 — Yes Details →

The newest 120 of 315 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2025 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/cilium/hubble

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2025-48056: Hubble CLI Character Injection Vulnerability 5.3 medium 1.17.2 21 May 2025
CVE-2025-48056: Character Injection Vulnerability in Hubble CLI of github.com/cilium/hubble N/A unrated 1.17.2 23 May 2025

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/cilium/hubble

Is github.com/cilium/hubble safe to use?

Vulert records 2 vulnerabilities for github.com/cilium/hubble in Go: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/cilium/hubble's Vulert package health score?

Vulert scores github.com/cilium/hubble 84/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/cilium/hubble affected?

Yes. v1.20.2, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/cilium/hubble should I use?

v1.20.2 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/cilium/hubble have?

2 vulnerabilities are recorded for github.com/cilium/hubble in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/cilium/hubble vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/cilium/hubble in the last 12 months, and the oldest entry in this database dates to 21 May 2025. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/cilium/hubble are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/cilium/hubble for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/cilium/hubble version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.