VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/dhowden/tag: vulnerability history, versions and safety

github.com/dhowden/tag is a package in the Go ecosystem. Vulert records 7 vulnerabilities for it across 120 releases, from Apr 2021 to Feb 2023. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
7 vulnerabilities recorded M6 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/dhowden/tag vulnerabilities

Vulert verdict on github.com/dhowden/tag v0.0.0-20240417053706-3d75831295e8 i

Updated on 23 Oct 2026

Action needed: v0.0.0-20240417053706-3d75831295e8 has 7 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 67/100
  • Security Minor issues
  • Maintenance Maintaining
  • Popularity Widely used
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.0.0-20240417053706-3d75831295e8 — affected i
  • Vulnerabilities on record 7 over 1 year · 0 in the last year i
  • Latest disclosure 07 Feb 2023 i
  • Highest CVSS 6.5 i
  • With no published fix 0 i
  • Stars 652 i
  • OpenSSF scorecard 2/10 i
  • Last release 30 months ago i
  • Licence BSD-2-Clause i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/dhowden/tag, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20240417053706-3d75831295e8 17 Apr 2024 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20240413230847-dc579f508b6b 13 Apr 2024 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20240122214204-713ab0e94639 22 Jan 2024 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20240122213351-0253fc576d1c 22 Jan 2024 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20230630033851-978a0926ee25 30 Jun 2023 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20220618230019-adf36e896086 18 Jun 2022 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20220617232555-e66a190c9f5b 17 Jun 2022 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20220617232208-d68341c4e2c5 17 Jun 2022 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20220617231605-c3f9cefce8af 17 Jun 2022 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20220530110423-77907a30b7f1 30 May 2022 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20201120070457-d52dcb253c63 20 Nov 2020 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20201119193204-a92213460e48 19 Nov 2020 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20201119192817-4b595ed4fac7 19 Nov 2020 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20201119192538-6b18201aa5c5 19 Nov 2020 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20201119192129-53ee65d2aee8 19 Nov 2020 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20200828214007-46e57f75dbfc 28 Aug 2020 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20200412032933-5d76b8eaae27 12 Apr 2020 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20200411022004-869a70545f82 11 Apr 2020 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20191122115059-7e5c04feccd8 22 Nov 2019 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20191122112340-73beae500896 22 Nov 2019 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20191120132007-f644c1478465 20 Nov 2019 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20190519100835-db0c67e351b1 19 May 2019 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20181104225729-a9f04c2798ca 04 Nov 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20181104205600-34f7f1e3c8f6 04 Nov 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180921090225-c555fff0b740 21 Sep 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180921085854-222f0b2988b6 21 Sep 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180903131519-bcc288a50a51 03 Sep 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180902174924-5cdccc969331 02 Sep 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180902172237-3543a25cd74b 02 Sep 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180902131659-43725ee9b60e 02 Sep 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180815181651-82440840077f 15 Aug 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180402010641-e80a3fa76a96 02 Apr 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180402005432-1264d437b395 02 Apr 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180401221811-f163d543fb1c 01 Apr 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180401221725-964345f10ffb 01 Apr 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180401221710-3fc65dddfc67 01 Apr 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180401221646-4f91c64763e1 01 Apr 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180401221454-610452ee6461 01 Apr 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180401212656-f4ddc56a4c79 01 Apr 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180219070122-ba105bfefce0 19 Feb 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180217020703-d2206af14561 17 Feb 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180207073707-d449289c5e6f 07 Feb 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180207073647-1582ebc2a452 07 Feb 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20180207073617-737d3560ddb3 07 Feb 2018 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20171022112305-3066d300773c 22 Oct 2017 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20171022104229-22a67155365b 22 Oct 2017 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20170913225556-e24fc33f60ef 13 Sep 2017 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20170913224305-5e368ba94d1e 13 Sep 2017 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20170801122901-b45cd4d440f5 01 Aug 2017 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20170128231422-9edd38ca5d10 28 Jan 2017 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160716231021-0b712361d3bb 16 Jul 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160716221653-29306b74879c 16 Jul 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160716221653-abfb4860c42f 16 Jul 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160716221653-ae005145bc40 16 Jul 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160716221653-c119c3eeeb25 16 Jul 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160716221653-f16224df21fd 16 Jul 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160711185103-028d34242516 11 Jul 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160509124003-9daeb8310559 09 May 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160509123719-bfba4b35ab9d 09 May 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160505205024-1c1d74b935b1 05 May 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160505151851-2d92c9058885 05 May 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160420210030-66b965ab4920 20 Apr 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160420115254-4cd9615aa11e 20 Apr 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160306112405-bccc91e40dd7 06 Mar 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160306112154-a55be0e8bf66 06 Mar 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160305051711-996bee7eb65d 05 Mar 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160222100112-a35ac090425b 22 Feb 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160103120517-5b94194b2975 03 Jan 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160103120045-030e21e7c231 03 Jan 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160102213949-5fe43c28e4b9 02 Jan 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20160101152032-78bcb9ae28b5 01 Jan 2016 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20151229022545-dc1f3d7b511a 29 Dec 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20151228203606-f26c1533eed3 28 Dec 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150920101312-c259675f2970 20 Sep 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150920100942-554fadb2b42c 20 Sep 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150712012714-549eab9b7500 12 Jul 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150712000212-05c9a3fa59d1 12 Jul 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150704124917-334c71001c1b 04 Jul 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150704122043-1e646522d630 04 Jul 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150703131516-62e2154cad44 03 Jul 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150702130750-78f72c23bdb2 02 Jul 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150702130717-b60e5290918f 02 Jul 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150630130726-92e6d71ddbe2 30 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150630130650-52902f61b8d6 30 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150630130559-00cce1510259 30 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150629225855-0b455fc1761d 29 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150629225703-6021704ba332 29 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150629225621-6d208fee6909 29 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150628024049-cc382c48de74 28 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150628023442-6af476df9431 28 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150628012507-bda3a1fa8b0d 28 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150628004745-3e7020b16172 28 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150628004357-17f4f77bef1d 28 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150628003257-a579928cb283 28 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150627235357-cc7e8af34076 27 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150627235337-624837fdc18d 27 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150627235307-db723fecfc08 27 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150627092433-1b0e92375aa8 27 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150608010132-d3e0c4a33f6c 08 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150607030112-c06066fd882f 07 Jun 2015 M6 U1 BSD-2-Clause Yes Details →
v0.0.0-20150607025858-6df4e78d9640 07 Jun 2015 M6 U1 — Yes Details →
v0.0.0-20150607025444-7f8f21cc46cf 07 Jun 2015 M6 U1 — Yes Details →
v0.0.0-20150606063544-4d2e737694e8 06 Jun 2015 M6 U1 — Yes Details →
v0.0.0-20150606063544-6cd7fd8f70b4 06 Jun 2015 M6 U1 — Yes Details →
v0.0.0-20150606063544-ddaa43f29c54 06 Jun 2015 M6 U1 — Yes Details →
v0.0.0-20150606063544-e7f103ff85c4 06 Jun 2015 M6 U1 — Yes Details →
v0.0.0-20150606063539-9534e41d819b 06 Jun 2015 M6 U1 — Yes Details →
v0.0.0-20150527085835-d03fdf9fb53b 27 May 2015 M6 U1 — Yes Details →
v0.0.0-20150526224347-36d916386888 26 May 2015 M6 U1 — Yes Details →
v0.0.0-20150525125042-e6dce4ae2a87 25 May 2015 M6 U1 — Yes Details →
v0.0.0-20150525123614-3f92286cdbe2 25 May 2015 M6 U1 — Yes Details →
v0.0.0-20150525065737-6c5d32240b1f 25 May 2015 M6 U1 — Yes Details →
v0.0.0-20150525064531-a931bf6e3008 25 May 2015 M6 U1 — Yes Details →
v0.0.0-20150524223347-be3da624882b 24 May 2015 M6 U1 — Yes Details →
v0.0.0-20150524213638-ffefb506814e 24 May 2015 M6 U1 — Yes Details →
v0.0.0-20150524191915-a678a5d67bf2 24 May 2015 M6 U1 — Yes Details →
v0.0.0-20150524124906-5ed21afced17 24 May 2015 M6 U1 — Yes Details →
v0.0.0-20150524123721-8bdc82eff0fd 24 May 2015 M6 U1 — Yes Details →
v0.0.0-20150524031343-ce0c1dc2f8a1 24 May 2015 M6 U1 — Yes Details →
v0.0.0-20150524031332-2cbec0cf93b9 24 May 2015 M6 U1 — Yes Details →

The newest 120 of 172 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2021 1
  • 2022 5
  • 2023 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 7 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/dhowden/tag

The 5 most severe of 7 vulnerabilities recorded for this package

Search all 7 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2020-29242: Out-of-Bounds Read Vulnerability in github.com/dhowden/tag 6.5 medium 0.0.0-20201120070457-d52dcb253c63 24 May 2022
CVE-2020-29244: Out-of-Bounds Read Vulnerability in github.com/dhowden/tag 6.5 medium 0.0.0-20201120070457-d52dcb253c63 24 May 2022
CVE-2020-29243: Out-of-Bounds Read Vulnerability in github.com/dhowden/tag 6.5 medium 0.0.0-20201120070457-d52dcb253c63 24 May 2022
CVE-2020-29242: Denial of Service in dhowden/tag 6.5 medium 0.0.0-20201120070457-d52dcb253c63 24 May 2022
CVE-2020-29242: Denial of Service in dhowden/tag 4.8 medium 0.0.0-20201120070457-d52dcb253c63 07 Feb 2023

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/dhowden/tag

Is github.com/dhowden/tag safe to use?

Vulert records 7 vulnerabilities for github.com/dhowden/tag in Go: 0 critical, 0 high, 6 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/dhowden/tag's Vulert package health score?

Vulert scores github.com/dhowden/tag 67/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/dhowden/tag affected?

Yes. v0.0.0-20240417053706-3d75831295e8, the version you would install today, has 7 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/dhowden/tag should I use?

v0.0.0-20240417053706-3d75831295e8 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/dhowden/tag have?

7 vulnerabilities are recorded for github.com/dhowden/tag in the Go ecosystem: 0 critical, 0 high, 6 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/dhowden/tag vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/dhowden/tag in the last 12 months, and the oldest entry in this database dates to 14 Apr 2021. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/dhowden/tag are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/dhowden/tag for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/dhowden/tag version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.