Vulnerability Database · Go · Package report
github.com/cosmos/iavl: vulnerability history, versions and safety
github.com/cosmos/iavl is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/cosmos/iavl v1.3.6 i
Updated on 23 Oct 2026
Good news: v1.3.6, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Sustainable
- Popularity Niche
- Community Quiet
What to do: Stay on v1.3.6 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.3.6 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v1.3.6 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 446 i
- OpenSSF scorecard 4/10 i
- Last release 6 months ago i
- Licence Apache-2.0 i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/cosmos/iavl, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v0.0.0-20261005174421-6e67caec57ae 05 Oct 2026
- v1.0.0-beta.1.0.20261005174421-6e67caec57ae 05 Oct 2026
- v0.0.0-20260928144135-6e52997e8c54 28 Sep 2026
- v1.0.0-beta.1.0.20260928144135-6e52997e8c54 28 Sep 2026
- v1.2.9-0.20260518150135-1ad0060744f0 18 May 2026
- v0.0.0-20260518144453-0b9d3dab6750 18 May 2026
- v1.0.0-beta.1.0.20260518144453-0b9d3dab6750 18 May 2026
- v0.0.0-20260513143748-0462de285837 13 May 2026
- v1.0.0-beta.1.0.20260513143748-0462de285837 13 May 2026
- v0.0.0-20260409145406-52b0f622f83e 09 Apr 2026
- v1.0.0-beta.1.0.20260409145406-52b0f622f83e 09 Apr 2026
- v1.2.8 06 Apr 2026
- v1.2.8-0.20260406175355-45196a8322a0 06 Apr 2026
- v1.2.7 06 Apr 2026
- v1.3.6 06 Apr 2026
- v0.0.0-20260406151211-bb797d3a04eb 06 Apr 2026
- v1.0.0-beta.1.0.20260406151211-bb797d3a04eb 06 Apr 2026
- v1.0.0-beta.1.0.20260406145421-146f72321f31 06 Apr 2026
- v1.2.7-0.20260402203012-2eb2176f7a2f 02 Apr 2026
- v1.0.0-beta.1.0.20260402185445-b7a8ca57b268 02 Apr 2026
- v1.2.7-0.20260402171340-778bc21b2fc8 02 Apr 2026
- v1.2.7-0.20260402163713-6e3610dafc98 02 Apr 2026
- v1.2.7-0.20260402155526-69d1ccbd85a1 02 Apr 2026
- v1.2.7-0.20260402154813-0cb3c458bd28 02 Apr 2026
- v0.0.0-20251112193803-68ea6f6d00f4 12 Nov 2025
- v1.0.0-beta.1.0.20251112193803-68ea6f6d00f4 12 Nov 2025
- v1.0.0-beta.1.0.20250912161555-0baa45bef9b7 12 Sep 2025
- v1.0.0-beta.1.0.20250829183505-8e11ef38d394 29 Aug 2025
- v0.0.0-20250528143651-0e4c40f1f5ef 28 May 2025
- v1.0.0-beta.1.0.20250528143651-0e4c40f1f5ef 28 May 2025
- v1.0.0-beta.1.0.20250411163645-49c26d6c47e9 11 Apr 2025
- v1.2.7-0.20250411160918-d056d7c828f9 11 Apr 2025
- v1.0.0-beta.1.0.20250401201921-af0fed22e85e 01 Apr 2025
- v1.0.0-beta.1.0.20250401141357-c07a2403deb7 01 Apr 2025
- v1.2.6 27 Mar 2025
- v1.0.0-beta.1.0.20250327145531-00941d2588d8 27 Mar 2025
- v1.2.5 26 Mar 2025
- v1.0.0-beta.1.0.20250326174208-8a2e2fea9dec 26 Mar 2025
- v0.0.0-20250306174232-6cfb3dac2c71 06 Mar 2025
- v1.2.5-0.20250306174232-6cfb3dac2c71 06 Mar 2025
- v1.2.5-0.20250224053109-a896fc3bf0e1 24 Feb 2025
- v1.2.1-0.20250224013252-3b9b5d118a63 24 Feb 2025
- v1.2.1-0.20250223233010-f5045d431ea5 23 Feb 2025
- v1.0.0-beta.1.0.20250214231356-8e6443f30c41 14 Feb 2025
- v1.0.0-beta.1.0.20250114095739-0bce70d6323d 14 Jan 2025
- v1.2.5-0.20241231014634-7b90e2539225 31 Dec 2024
- v1.2.4 27 Dec 2024
- v1.3.5 27 Dec 2024
- v1.0.0-beta.1.0.20241227074511-0f9b92f89a68 27 Dec 2024
- v1.2.4-0.20241218014611-3b0ad9922f9f 18 Dec 2024
- v1.0.0-beta.1.0.20241217144257-c20afc17599c 17 Dec 2024
- v1.3.4 17 Dec 2024
- v1.3.4-0.20241217123916-ec7a2b176fc7 17 Dec 2024
- v1.0.0-beta.1.0.20241216193019-f9c402d40752 16 Dec 2024
- v1.3.3 16 Dec 2024
- v1.2.3 16 Dec 2024
- v1.0.0-beta.1.0.20241216170551-e60601d37e18 16 Dec 2024
- v0.0.0-20241208123637-456159f12b9c 08 Dec 2024
- v1.0.0-beta.1.0.20241208123637-456159f12b9c 08 Dec 2024
- v0.0.0-20241206205720-a989ed4ed0e4 06 Dec 2024
- v1.0.0-beta.1.0.20241206205720-a989ed4ed0e4 06 Dec 2024
- v0.0.0-20241203115630-1aaca64f3fc7 03 Dec 2024
- v1.0.0-beta.1.0.20241203115630-1aaca64f3fc7 03 Dec 2024
- v1.3.2 26 Nov 2024
- v1.2.2 26 Nov 2024
- v0.0.0-20241126091229-cf74234d76cd 26 Nov 2024
- v1.0.0-beta.1.0.20241126091229-cf74234d76cd 26 Nov 2024
- v0.0.0-20241125122451-cd2ce5bc0792 25 Nov 2024
- v1.0.0-beta.1.0.20241125122451-cd2ce5bc0792 25 Nov 2024
- v0.0.0-20241114213330-e64d15776508 14 Nov 2024
- v1.0.0-beta.1.0.20241114213330-e64d15776508 14 Nov 2024
- v0.0.0-20241107100316-ba6a24c1d98b 07 Nov 2024
- v1.0.0-beta.1.0.20241107100316-ba6a24c1d98b 07 Nov 2024
- v1.3.1 04 Nov 2024
- v1.0.0-beta.1.0.20241104172600-8a65a7c8ef08 04 Nov 2024
- v1.0.0-beta.1.0.20241104134532-256952e44727 04 Nov 2024
- v1.0.0-beta.1.0.20241021162339-e99f035d10e3 21 Oct 2024
- v1.0.0-beta.1.0.20240906110809-9d5d2807f744 06 Sep 2024
- v0.0.0-20240831103244-1237c4ab6cfa 31 Aug 2024
- v1.0.0-beta.1.0.20240831103244-1237c4ab6cfa 31 Aug 2024
- v0.0.0-20240827134643-70519d07c07e 27 Aug 2024
- v1.0.0-beta.1.0.20240827134643-70519d07c07e 27 Aug 2024
- v1.0.0-beta.1.0.20240819104250-b37ff1e9ff4e 19 Aug 2024
- v1.0.0-beta.1.0.20240813194616-eb5078efcf9e 13 Aug 2024
- v1.0.0-beta.1.0.20240731150808-c68db50483d6 31 Jul 2024
- v1.3.0 31 Jul 2024
- v0.0.0-20240731145221-594b181f427e 31 Jul 2024
- v1.2.1 31 Jul 2024
- v1.2.1-0.20240731145221-594b181f427e 31 Jul 2024
- v1.0.0-beta.1.0.20240731135816-22928a2029cd 31 Jul 2024
- v1.2.1-0.20240729184208-984d49bec4bc 29 Jul 2024
- v1.0.0-beta.1.0.20240726182225-7939ef965811 26 Jul 2024
- v0.0.0-20240725141113-7adc688cf179 25 Jul 2024
- v1.2.1-0.20240725141113-7adc688cf179 25 Jul 2024
- v1.0.0-beta.1.0.20240725123905-59e29925ac26 25 Jul 2024
- v1.2.1-0.20240709120915-7cbae69fd94d 09 Jul 2024
- v1.0.0-beta.1.0.20240709120757-a514883e2f41 09 Jul 2024
- v0.0.0-20240628130216-0b6f1b68c802 28 Jun 2024
- v1.0.0-beta.1.0.20240628130216-0b6f1b68c802 28 Jun 2024
- v1.2.0 13 May 2024
- v0.0.0-20240513085031-57dac17f3339 13 May 2024
- v1.0.0-beta.1.0.20240513085031-57dac17f3339 13 May 2024
- v1.0.0-beta.1.0.20240508155120-15edeada66a7 08 May 2024
- v1.1.4 08 May 2024
- v1.1.3-0.20240508141442-4ad064ece06e 08 May 2024
- v1.0.0-beta.1.0.20240508141325-46f22ab14a63 08 May 2024
- v1.1.3 08 May 2024
- v1.0.0-beta.1.0.20240508132347-bf2bf2784774 08 May 2024
- v1.0.4 07 May 2024
- v1.1.3-0.20240418004230-368ab429efd8 18 Apr 2024
- v1.0.0-beta.1.0.20240415153732-2c5614f7f4f7 15 Apr 2024
- v1.1.3-0.20240409214848-eb53a7653a14 09 Apr 2024
- v1.0.3 08 Apr 2024
- v1.1.2 08 Apr 2024
- v1.1.2-0.20240408121757-39f5944083ce 08 Apr 2024
- v1.0.0-beta.1.0.20240406015006-013ea5ca9b01 06 Apr 2024
- v1.1.2-0.20240405173644-e52f7630d3b7 05 Apr 2024
- v1.1.2-0.20240405172238-7f92c6b356ac 05 Apr 2024
- v1.1.2-0.20240405160323-6ce8e9c4dea7 05 Apr 2024
- v1.1.2-0.20240405152413-550d6e7015a0 05 Apr 2024
The newest 120 of 466 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/cosmos/iavl
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/cosmos/iavl
Is github.com/cosmos/iavl safe to use?
Vulert has no vulnerabilities on record for github.com/cosmos/iavl in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/cosmos/iavl's Vulert package health score?
Vulert scores github.com/cosmos/iavl 73/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/cosmos/iavl affected?
No. v1.3.6, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of github.com/cosmos/iavl should I use?
v1.3.6 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does github.com/cosmos/iavl have?
0 vulnerabilities are recorded for github.com/cosmos/iavl in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/cosmos/iavl vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/cosmos/iavl in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/cosmos/iavl are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/cosmos/iavl for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/cosmos/iavl version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.