Vulnerability Database · Go · Package report
github.com/compose-spec/compose-go: vulnerability history, versions and safety
github.com/compose-spec/compose-go is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/compose-spec/compose-go v1.20.2 i
Updated on 23 Oct 2026
Good news: v1.20.2, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Slowing
- Popularity Niche
- Community Quiet
What to do: Stay on v1.20.2 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.20.2 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v1.20.2 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 447 i
- OpenSSF scorecard 4/10 i
- Last release 35 months ago i
- Licence Apache-2.0 i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/compose-spec/compose-go, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v1.20.3-0.20231123162559-87686197ead6 23 Nov 2023
- v1.20.2 21 Nov 2023
- v1.20.1 13 Nov 2023
- v1.20.1-0.20231027083342-946a781bde7c 27 Oct 2023
- v1.20.1-0.20231027082424-7ef3e28e2868 27 Oct 2023
- v1.20.0 17 Oct 2023
- v0.0.0-20231012150443-3d07b9fd4c6d 12 Oct 2023
- v0.0.0-20231002072721-2d32c3f774bd 02 Oct 2023
- v1.19.1-0.20231002072721-2d32c3f774bd 02 Oct 2023
- v1.19.1-0.20231002063835-588d586dddd0 02 Oct 2023
- v1.19.1-0.20230929154137-4b1e1a432d7d 29 Sep 2023
- v1.19.1-0.20230921144603-09fd935cf783 21 Sep 2023
- v1.18.5-0.20230920150948-923ed64eb060 20 Sep 2023
- v1.19.0 20 Sep 2023
- v1.2.4-0.20230920072217-f3748456c862 20 Sep 2023
- v1.18.5-0.20230912124550-ba097a5dee20 12 Sep 2023
- v1.18.5-0.20230907182837-f02a5804247f 07 Sep 2023
- v1.18.4 04 Sep 2023
- v1.18.4-0.20230904121213-c8ee8d483adc 04 Sep 2023
- v1.18.4-0.20230831144607-93259452db49 31 Aug 2023
- v1.18.3 29 Aug 2023
- v1.18.3-0.20230829190453-c6eecc55b95f 29 Aug 2023
- v1.18.3-0.20230825143128-1be5aca96b79 25 Aug 2023
- v1.18.2 18 Aug 2023
- v1.18.2-0.20230817182212-e5265c82506d 17 Aug 2023
- v1.18.1 10 Aug 2023
- v1.18.1-0.20230810183736-45494a8f6b01 10 Aug 2023
- v1.18.0 10 Aug 2023
- v1.17.1-0.20230809123455-339d49d47ba2 09 Aug 2023
- v1.17.1-0.20230804173358-08d8d55b67a7 04 Aug 2023
- v1.16.1-0.20230718085153-95ac1be8bfdc 18 Jul 2023
- v1.17.0 18 Jul 2023
- v1.16.1-0.20230715081347-e4d696aab247 15 Jul 2023
- v1.16.1-0.20230713171958-2c14f1c52751 13 Jul 2023
- v1.15.1-0.20230713033813-ba2b641bc8cc 13 Jul 2023
- v1.16.1-0.20230712161308-2cef411efb76 12 Jul 2023
- v1.15.2-0.20230710090357-a3837e2378b8 10 Jul 2023
- v1.16.0 10 Jul 2023
- v1.15.2-0.20230707071813-87ef292a4c91 07 Jul 2023
- v0.0.0-20230707065912-3e029310f734 07 Jul 2023
- v1.15.2-0.20230704101938-7c277db9a2cb 04 Jul 2023
- v1.15.1 29 Jun 2023
- v1.2.9-0.20230628171134-4719844daaa5 28 Jun 2023
- v1.15.1-0.20230627142517-169d13bec1e8 27 Jun 2023
- v1.15.1-0.20230627073525-38ccd50585cf 27 Jun 2023
- v1.14.1-0.20230621085929-532cd92682a3 21 Jun 2023
- v1.15.0 21 Jun 2023
- v1.14.1-0.20230607165024-ab048945b8dd 07 Jun 2023
- v1.14.1-0.20230605082421-1b48d06f1871 05 Jun 2023
- v1.14.1-0.20230601160040-dc7471e99745 01 Jun 2023
- v1.14.1-0.20230529063716-d41b50b0e771 29 May 2023
- v1.14.0 26 May 2023
- v1.13.6-0.20230523174224-3e67049bc1c5 23 May 2023
- v1.2.4-0.20230523133741-642d21440a1f 23 May 2023
- v1.13.5 16 May 2023
- v1.13.5-0.20230515185816-ec9cd7085d4f 15 May 2023
- v1.13.5-0.20230511205012-4e62a573bc70 11 May 2023
- v1.13.5-0.20230509125718-9b35fdc25094 09 May 2023
- v1.13.5-0.20230508131315-aab3c27f6eac 08 May 2023
- v1.13.5-0.20230428114111-dc86152620a1 28 Apr 2023
- v1.13.5-0.20230425072106-2c306581a110 25 Apr 2023
- v1.13.4 20 Apr 2023
- v1.13.4-0.20230419075933-84df2084421c 19 Apr 2023
- v1.13.3 17 Apr 2023
- v1.13.3-0.20230412113336-270da2dbdd16 12 Apr 2023
- v1.13.3-0.20230407140923-1af0f4259901 07 Apr 2023
- v1.13.3-0.20230330135023-298fa921af9a 30 Mar 2023
- v1.13.3-0.20230329055540-43f1d4190038 29 Mar 2023
- v1.13.3-0.20230327063356-e0f9c51050ce 27 Mar 2023
- v1.13.2 26 Mar 2023
- v1.13.1 24 Mar 2023
- v1.13.1-0.20230323205239-a4da4da78d87 23 Mar 2023
- v1.13.1-0.20230322081832-571364394e14 22 Mar 2023
- v1.13.1-0.20230320081926-ec503aa1821d 20 Mar 2023
- v1.13.1-0.20230319205655-684383f3df07 19 Mar 2023
- v1.13.1-0.20230315151104-71050421e537 15 Mar 2023
- v1.13.0 15 Mar 2023
- v1.12.1-0.20230314075744-507df25f301d 14 Mar 2023
- v1.12.1-0.20230313110603-02f25ec12be1 13 Mar 2023
- v1.12.1-0.20230303175350-37ba72434866 03 Mar 2023
- v1.12.1-0.20230303170945-226dd79cac83 03 Mar 2023
- v1.11.1-0.20230301111030-bbbdf2bc95e0 01 Mar 2023
- v1.12.0 01 Mar 2023
- v1.11.1-0.20230301100451-7a7b59309ca5 01 Mar 2023
- v1.11.1-0.20230227102227-75dcb29e3ecb 27 Feb 2023
- v1.11.1-0.20230217162415-fc7f2b85061f 17 Feb 2023
- v1.11.0 17 Feb 2023
- v1.0.9-0.20230216062327-b16c6a1206be 16 Feb 2023
- v1.10.1-0.20230216062327-b16c6a1206be 16 Feb 2023
- v1.10.0 15 Feb 2023
- v1.9.1-0.20230215200714-9936908bc687 15 Feb 2023
- v1.9.1-0.20230123150133-99db19abf0de 23 Jan 2023
- v1.9.1-0.20230120170855-02f24e949ea0 20 Jan 2023
- v1.9.0 20 Jan 2023
- v1.8.3-0.20230119172636-ddc8c41f1d77 19 Jan 2023
- v1.8.3-0.20230117135717-559e4fd37827 17 Jan 2023
- v1.8.3-0.20230113150511-de35344d384a 13 Jan 2023
- v1.8.3-0.20230112231644-8a7810047b32 12 Jan 2023
- v1.0.9-0.20230112185655-aaf3ada806aa 12 Jan 2023
- v1.2.4-0.20230112133747-784a7e77d00e 12 Jan 2023
- v1.8.3-0.20230110134054-5c348e375e19 10 Jan 2023
- v1.8.2 05 Jan 2023
- v1.8.2-0.20230103092011-b56ae2b7736c 03 Jan 2023
- v1.8.2-0.20221225020119-7d49c99fcfd2 25 Dec 2022
- v1.8.2-0.20221224060916-06f2fe383c9c 24 Dec 2022
- v1.0.9-0.20221223215120-0f2b59999248 23 Dec 2022
- v1.0.9-0.20221222233447-4c5c8332b699 22 Dec 2022
- v1.8.2-0.20221222233447-4c5c8332b699 22 Dec 2022
- v1.2.4-0.20221222130151-62f838f7f8fd 22 Dec 2022
- v1.8.1 20 Dec 2022
- v1.8.1-0.20221219131057-ecbc28d2bb81 19 Dec 2022
- v1.8.1-0.20221216074921-c790067d9e8d 16 Dec 2022
- v1.8.1-0.20221207072645-498a1aaafdb5 07 Dec 2022
- v1.7.2-0.20221201192628-d61c32fedd9f 01 Dec 2022
- v1.8.0 01 Dec 2022
- v1.7.2-0.20221130201728-afd9c3310cad 30 Nov 2022
- v1.7.1 24 Nov 2022
- v1.7.1-0.20221124142738-999ce243aaf9 24 Nov 2022
- v1.7.0 08 Nov 2022
- v1.6.1-0.20221107142549-87bd752aa09b 07 Nov 2022
The newest 120 of 438 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/compose-spec/compose-go
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/compose-spec/compose-go
Is github.com/compose-spec/compose-go safe to use?
Vulert has no vulnerabilities on record for github.com/compose-spec/compose-go in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/compose-spec/compose-go's Vulert package health score?
Vulert scores github.com/compose-spec/compose-go 62/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/compose-spec/compose-go affected?
No. v1.20.2, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of github.com/compose-spec/compose-go should I use?
v1.20.2 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does github.com/compose-spec/compose-go have?
0 vulnerabilities are recorded for github.com/compose-spec/compose-go in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/compose-spec/compose-go vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/compose-spec/compose-go in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/compose-spec/compose-go are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/compose-spec/compose-go for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/compose-spec/compose-go version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.