VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/envoyproxy/go-control-plane: vulnerability history, versions and safety

github.com/envoyproxy/go-control-plane is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/envoyproxy/go-control-plane vulnerabilities

Vulert verdict on github.com/envoyproxy/go-control-plane v0.14.0 i

Updated on 23 Oct 2026

Good news: Vulert has no vulnerability on record for github.com/envoyproxy/go-control-plane in the Go ecosystem. That is a good sign, not a guarantee — keep an eye on the versions you run.

Package health score 85/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Widely used
  • Community Moderate

What to do: Run a supported release and keep monitoring: new vulnerabilities are published for packages every day. Nothing yet: a new vulnerability can appear at any time — Vulert alerts you if one affects this package. Monitor it with Vulert →

  • Current release v0.14.0 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 1,738 i
  • OpenSSF scorecard 5/10 i
  • Last release this month i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/envoyproxy/go-control-plane, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20261023095121-937f50997859 23 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261023095121-937f50997859 23 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261022022917-a2fd476cc73c 22 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261022022917-a2fd476cc73c 22 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261020164159-f54fba5e273e 20 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261020164159-f54fba5e273e 20 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261020135749-7faa7788f3e0 20 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261020135749-7faa7788f3e0 20 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261020022119-549b668d5b33 20 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261020022119-549b668d5b33 20 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261019062740-64cb4bfe29d8 19 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261019062740-64cb4bfe29d8 19 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261018015348-ac1fe60cb09a 18 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261018015348-ac1fe60cb09a 18 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261017072358-cded3a6731eb 17 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261017072358-cded3a6731eb 17 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261016175318-3ddcf708b2e8 16 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261016175318-3ddcf708b2e8 16 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261016144118-e1e1cbb0fc50 16 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261016144118-e1e1cbb0fc50 16 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261015230554-d4fabda39917 15 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261015230554-d4fabda39917 15 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261015183830-ecaf399f2d0e 15 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261015183830-ecaf399f2d0e 15 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261014170222-9c4befd3c419 14 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261014170222-9c4befd3c419 14 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261014163454-bb16ef378c4a 14 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261014143614-767fa0af4e1e 14 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261014143614-767fa0af4e1e 14 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261014075004-7d1a1f1e455b 14 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261014075004-7d1a1f1e455b 14 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261014055625-562257654159 14 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261014055625-562257654159 14 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261013224542-61b175b5f524 13 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261013224542-61b175b5f524 13 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261013120021-5c5ac772744b 13 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261013120021-5c5ac772744b 13 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261013032812-1eb1cb5a3fe2 13 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261013032812-1eb1cb5a3fe2 13 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261011123632-0b31c014c0e3 11 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261011123632-0b31c014c0e3 11 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261011015143-768570091c12 11 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261011015143-768570091c12 11 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261007083326-1c27b0993199 07 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261007083326-1c27b0993199 07 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261007011341-13eafbbd31e6 07 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261007011341-13eafbbd31e6 07 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261006202908-c869b7a9d791 06 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261006202908-c869b7a9d791 06 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261005232250-94ef575c7702 05 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261005232250-94ef575c7702 05 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261005215302-dee69b21da22 05 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261005215302-dee69b21da22 05 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261005171058-1bc8af88e58c 05 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261005171058-1bc8af88e58c 05 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261005071813-1f9b601933a5 05 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261005071813-1f9b601933a5 05 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261005013304-91e0b64a9ad8 05 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261005013304-91e0b64a9ad8 05 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261003070529-6b14e001be9b 03 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261003070529-6b14e001be9b 03 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261003044552-02747e7f1388 03 Oct 2026 none Apache-2.0 — Details →
v0.14.1-0.20261003044552-02747e7f1388 03 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20260930220544-bd48b98b7776 30 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260930220544-bd48b98b7776 30 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260930203813-ef274e4e9e45 30 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260930183508-c9167fc2af16 30 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260930152302-3fc82372d894 30 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260930152302-3fc82372d894 30 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260930025058-6d3abf9dbb4a 30 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260930025058-6d3abf9dbb4a 30 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260930013055-78912e27f157 30 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260930013055-78912e27f157 30 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260929194828-e8b80555f359 29 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260929194828-e8b80555f359 29 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260929151320-221d824141cf 29 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260929151320-221d824141cf 29 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260929114259-b46521a390b7 29 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260929114259-b46521a390b7 29 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260929054239-1c870a60c001 29 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260929054239-1c870a60c001 29 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260929025122-e58607f4bed2 29 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260929025122-e58607f4bed2 29 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260928215623-583dffdd5ea5 28 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260928161640-91cfd8940dcc 28 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260928161640-91cfd8940dcc 28 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260928114619-772ea2910a77 28 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260928114619-772ea2910a77 28 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260928030809-24d523751bbe 28 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260928030809-24d523751bbe 28 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260928022917-6d29001c431c 28 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260927022543-fc8912c55e30 27 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260927022543-fc8912c55e30 27 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260926055848-e2e507dc6eb4 26 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260926055848-e2e507dc6eb4 26 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260926055600-8a64c4aa265f 26 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260926005603-77163881f865 26 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260926005603-77163881f865 26 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260925211727-d72bb134a3a5 25 Sep 2026 none Apache-2.0 — Details →
v0.14.1-0.20260925211727-d72bb134a3a5 25 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260925201704-70c6e0db8c78 25 Sep 2026 none — — Details →
v0.14.1-0.20260925201704-70c6e0db8c78 25 Sep 2026 none — — Details →
v0.0.0-20260925195156-aa49aa544abe 25 Sep 2026 none — — Details →
v0.14.1-0.20260925195156-aa49aa544abe 25 Sep 2026 none — — Details →
v0.0.0-20260925170128-8e872c246848 25 Sep 2026 none — — Details →
v0.14.1-0.20260925170128-8e872c246848 25 Sep 2026 none — — Details →
v0.0.0-20260925150254-64289bff1621 25 Sep 2026 none — — Details →
v0.14.1-0.20260925150254-64289bff1621 25 Sep 2026 none — — Details →
v0.0.0-20260925041026-90594b5c8975 25 Sep 2026 none — — Details →
v0.14.1-0.20260925041026-90594b5c8975 25 Sep 2026 none — — Details →
v0.0.0-20260924200347-720a0436c8a3 24 Sep 2026 none — — Details →
v0.14.1-0.20260924200347-720a0436c8a3 24 Sep 2026 none — — Details →
v0.0.0-20260924002210-c454fa813f3d 24 Sep 2026 none — — Details →
v0.14.1-0.20260924002210-c454fa813f3d 24 Sep 2026 none — — Details →
v0.0.0-20260923144502-55738e0c1e8d 23 Sep 2026 none — — Details →
v0.14.1-0.20260923144502-55738e0c1e8d 23 Sep 2026 none — — Details →
v0.0.0-20260923142620-686fd7de7df2 23 Sep 2026 none — — Details →
v0.0.0-20260923133814-c05196b774af 23 Sep 2026 none — — Details →
v0.14.1-0.20260923133814-c05196b774af 23 Sep 2026 none — — Details →
v0.0.0-20260921174615-574d1046ec56 21 Sep 2026 none — — Details →

The newest 120 of 2,992 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/envoyproxy/go-control-plane

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/envoyproxy/go-control-plane

Is github.com/envoyproxy/go-control-plane safe to use?

Vulert has no vulnerabilities on record for github.com/envoyproxy/go-control-plane in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/envoyproxy/go-control-plane's Vulert package health score?

Vulert scores github.com/envoyproxy/go-control-plane 85/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Which version of github.com/envoyproxy/go-control-plane should I use?

v0.14.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/envoyproxy/go-control-plane have?

0 vulnerabilities are recorded for github.com/envoyproxy/go-control-plane in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/envoyproxy/go-control-plane vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/envoyproxy/go-control-plane in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/envoyproxy/go-control-plane are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/envoyproxy/go-control-plane for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/envoyproxy/go-control-plane version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.