Vulnerability Database · Go · Package report

github.com/fluxcd/pkg/oci: vulnerability history, versions and safety

github.com/fluxcd/pkg/oci is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

Vulert verdict on github.com/fluxcd/pkg/oci v0.72.0 i

Updated on 23 Oct 2026

Good news: v0.72.0, the version you would install today, has no known vulnerabilities.

Package health score 80/100
  • Security No known security issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Moderate

What to do: Stay on v0.72.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.72.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v0.72.0 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 62 i
  • OpenSSF scorecard 6/10 i
  • Last release this month i
  • Licence BSD-3-Clause i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/fluxcd/pkg/oci, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.72.1-0.20261021083809-44dcd58b4a3f 21 Oct 2026 none BSD-3-Clause — Details →
v0.72.1-0.20261016163406-2bc5cec3d729 16 Oct 2026 none BSD-3-Clause — Details →
v0.72.1-0.20261014200816-0886858807fa 14 Oct 2026 none BSD-3-Clause — Details →
v0.72.0 14 Oct 2026 none BSD-3-Clause — Details →
v0.71.0 14 Oct 2026 none BSD-3-Clause — Details →
v0.70.1-0.20260922154936-a1797f9a0f06 22 Sep 2026 none BSD-3-Clause — Details →
v0.70.0 16 Sep 2026 none BSD-3-Clause — Details →
v0.69.1-0.20260729133131-dfc427c54394 29 Jul 2026 none BSD-3-Clause — Details →
v0.68.1 12 Jul 2026 none BSD-3-Clause — Details →
v0.69.0 12 Jul 2026 none BSD-3-Clause — Details →
v0.68.0 12 Jun 2026 none BSD-3-Clause — Details →
v0.67.0 12 Jun 2026 none BSD-3-Clause — Details →
v0.66.0 08 May 2026 none BSD-3-Clause — Details →
v0.65.0 16 Apr 2026 none BSD-3-Clause — Details →
v0.64.0 15 Apr 2026 none BSD-3-Clause — Details →
v0.63.1-0.20260401105206-978262ecd0f3 01 Apr 2026 none BSD-3-Clause — Details →
v0.63.0 12 Mar 2026 none BSD-3-Clause — Details →
v0.60.1 12 Mar 2026 none BSD-3-Clause — Details →
v0.62.0 22 Feb 2026 none BSD-3-Clause — Details →
v0.61.0 20 Feb 2026 none BSD-3-Clause — Details →
v0.60.0 09 Feb 2026 none BSD-3-Clause — Details →
v0.59.0 22 Jan 2026 none BSD-3-Clause — Details →
v0.58.1-0.20251208085909-cac55028ec9b 08 Dec 2025 none BSD-3-Clause — Details →
v0.58.0 18 Nov 2025 none BSD-3-Clause — Details →
v0.57.1-0.20251112045744-0fe2a7c7e3dd 12 Nov 2025 none BSD-3-Clause — Details →
v0.57.1-0.20251009093400-73010683d7ae 09 Oct 2025 none BSD-3-Clause — Details →
v0.57.0 08 Oct 2025 none BSD-3-Clause — Details →
v0.56.1-0.20251003110847-ca99961bd557 03 Oct 2025 none BSD-3-Clause — Details →
v0.56.1-0.20250917060318-a4d66078f71a 17 Sep 2025 none BSD-3-Clause — Details →
v0.56.1-0.20250913092358-4e0af9166c13 13 Sep 2025 none BSD-3-Clause — Details →
v0.56.0 09 Sep 2025 none BSD-3-Clause — Details →
v0.55.0 03 Sep 2025 none BSD-3-Clause — Details →
v0.54.1-0.20250830105901-a5e02cec033a 30 Aug 2025 none BSD-3-Clause — Details →
v0.54.0 30 Aug 2025 none BSD-3-Clause — Details →
v0.53.1-0.20250817150345-ca950d13268f 17 Aug 2025 none BSD-3-Clause — Details →
v0.53.0 17 Aug 2025 none BSD-3-Clause — Details →
v0.0.0-20250816230824-f8a54d772e3d 16 Aug 2025 none BSD-3-Clause — Details →
v0.52.1-0.20250816230824-f8a54d772e3d 16 Aug 2025 none BSD-3-Clause — Details →
v0.0.0-20250816200510-709852db89fc 16 Aug 2025 none BSD-3-Clause — Details →
v0.52.1-0.20250816200510-709852db89fc 16 Aug 2025 none BSD-3-Clause — Details →
v0.0.0-20250814133626-4ca8fb011f0c 14 Aug 2025 none BSD-3-Clause — Details →
v0.52.1-0.20250814133626-4ca8fb011f0c 14 Aug 2025 none BSD-3-Clause — Details →
v0.0.0-20250812103727-6bf77f094c73 12 Aug 2025 none BSD-3-Clause — Details →
v0.52.0 12 Aug 2025 none BSD-3-Clause — Details →
v0.0.0-20250812054731-621a899e4c83 12 Aug 2025 none BSD-3-Clause — Details →
v0.51.1-0.20250812054731-621a899e4c83 12 Aug 2025 none BSD-3-Clause — Details →
v0.0.0-20250807183947-4bb23ecbdb91 07 Aug 2025 none BSD-3-Clause — Details →
v0.51.1-0.20250807183947-4bb23ecbdb91 07 Aug 2025 none BSD-3-Clause — Details →
v0.51.1-0.20250719123217-ea0856db0e0d 19 Jul 2025 none BSD-3-Clause — Details →
v0.51.1-0.20250712034919-856b04da5d60 12 Jul 2025 none BSD-3-Clause — Details →
v0.51.0 11 Jul 2025 none BSD-3-Clause — Details →
v0.50.1-0.20250710103012-6c8e4c189277 10 Jul 2025 none BSD-3-Clause — Details →
v0.50.0 10 Jul 2025 none BSD-3-Clause — Details →
v0.0.0-20250702175004-d07717ff2257 02 Jul 2025 none BSD-3-Clause — Details →
v0.49.1-0.20250702175004-d07717ff2257 02 Jul 2025 none BSD-3-Clause — Details →
v0.0.0-20250630094735-3671c3a96032 30 Jun 2025 none BSD-3-Clause — Details →
v0.49.1-0.20250630094735-3671c3a96032 30 Jun 2025 none BSD-3-Clause — Details →
v0.0.0-20250629144504-21cbf19670ac 29 Jun 2025 none BSD-3-Clause — Details →
v0.49.1-0.20250629144504-21cbf19670ac 29 Jun 2025 none BSD-3-Clause — Details →
v0.0.0-20250628172534-645523ed6a22 28 Jun 2025 none BSD-3-Clause — Details →
v0.49.1-0.20250628172534-645523ed6a22 28 Jun 2025 none BSD-3-Clause — Details →
v0.0.0-20250627081458-264a3b326b53 27 Jun 2025 none BSD-3-Clause — Details →
v0.49.1-0.20250627081458-264a3b326b53 27 Jun 2025 none BSD-3-Clause — Details →
v0.0.0-20250625181627-e5de5fadd41c 25 Jun 2025 none BSD-3-Clause — Details →
v0.49.1-0.20250625181627-e5de5fadd41c 25 Jun 2025 none BSD-3-Clause — Details →
v0.49.1-0.20250609155533-406c48d1b555 09 Jun 2025 none BSD-3-Clause — Details →
v0.49.0 19 May 2025 none BSD-3-Clause — Details →
v0.48.0 07 May 2025 none BSD-3-Clause — Details →
v0.47.1-0.20250507153320-d89e633e83a8 07 May 2025 none BSD-3-Clause — Details →
v0.47.1-0.20250504222034-ce6987524d7a 04 May 2025 none BSD-3-Clause — Details →
v0.47.1-0.20250504221632-2c420111664c 04 May 2025 none BSD-3-Clause — Details →
v0.47.1-0.20250504212336-3c3c3cab892e 04 May 2025 none BSD-3-Clause — Details →
v0.47.1-0.20250503144306-1985bd8e68a2 03 May 2025 none BSD-3-Clause — Details →
v0.10.1-0.20250430181312-7eae0914af24 30 Apr 2025 none BSD-3-Clause — Details →
v0.47.1-0.20250430181312-7eae0914af24 30 Apr 2025 none BSD-3-Clause — Details →
v0.47.1-0.20250430181229-9f689424c021 30 Apr 2025 none BSD-3-Clause — Details →
v0.47.0 29 Apr 2025 none BSD-3-Clause — Details →
v0.46.0 28 Apr 2025 none BSD-3-Clause — Details →
v0.45.0 31 Jan 2025 none BSD-3-Clause — Details →
v0.44.0 31 Jan 2025 none BSD-3-Clause — Details →
v0.43.1 10 Jan 2025 none BSD-3-Clause — Details →
v0.43.0 12 Dec 2024 none BSD-3-Clause — Details →
v0.0.0-20241206131828-3431579a0c60 06 Dec 2024 none BSD-3-Clause — Details →
v0.41.2-0.20241206131828-3431579a0c60 06 Dec 2024 none BSD-3-Clause — Details →
v0.42.0 06 Dec 2024 none BSD-3-Clause — Details →
v0.0.0-20241205135915-b83bd25dbf63 05 Dec 2024 none BSD-3-Clause — Details →
v0.41.2-0.20241205135915-b83bd25dbf63 05 Dec 2024 none BSD-3-Clause — Details →
v0.41.2-0.20241205134407-72d6f8c2228e 05 Dec 2024 none BSD-3-Clause — Details →
v0.0.0-20241126073220-4068cafcd8d6 26 Nov 2024 none BSD-3-Clause — Details →
v0.41.2-0.20241126073220-4068cafcd8d6 26 Nov 2024 none BSD-3-Clause — Details →
v0.0.0-20241123090932-aa0e9ce97175 23 Nov 2024 none BSD-3-Clause — Details →
v0.41.2-0.20241123090932-aa0e9ce97175 23 Nov 2024 none BSD-3-Clause — Details →
v0.0.0-20241119065843-facd2c2085ec 19 Nov 2024 none BSD-3-Clause — Details →
v0.41.2-0.20241119065843-facd2c2085ec 19 Nov 2024 none BSD-3-Clause — Details →
v0.0.0-20241108121642-2cbdbf505138 08 Nov 2024 none BSD-3-Clause — Details →
v0.41.2-0.20241108121642-2cbdbf505138 08 Nov 2024 none BSD-3-Clause — Details →
v0.41.2-0.20240913223614-30c101fc7c9f 13 Sep 2024 none BSD-3-Clause — Details →
v0.41.1 13 Sep 2024 none BSD-3-Clause — Details →
v0.41.0 10 Sep 2024 none BSD-3-Clause — Details →
v0.0.0-20240903091941-d467d6e21b52 03 Sep 2024 none BSD-3-Clause — Details →
v0.40.1-0.20240903091941-d467d6e21b52 03 Sep 2024 none — — Details →
v0.0.0-20240827064048-f0eb8aa7c6df 27 Aug 2024 none — — Details →
v0.40.1-0.20240820065012-11195c91e5e1 20 Aug 2024 none — — Details →
v0.40.0 15 Aug 2024 none — — Details →
v0.39.0 14 Aug 2024 none — — Details →
v0.0.0-20240702203041-c647aea83012 02 Jul 2024 none — — Details →
v0.38.1 02 Jul 2024 none — — Details →
v0.38.1-0.20240702203041-c647aea83012 02 Jul 2024 none — — Details →
v0.38.1-0.20240619075445-e8251e12b56b 19 Jun 2024 none — — Details →
v0.38.0 18 Jun 2024 none — — Details →
v0.0.0-20240521093735-140ac57483c7 21 May 2024 none — — Details →
v0.37.2-0.20240521093735-140ac57483c7 21 May 2024 none — — Details →
v0.0.0-20240513205726-235bfbb67d45 13 May 2024 none — — Details →
v0.37.1 02 May 2024 none — — Details →
v0.37.0 26 Apr 2024 none — — Details →
v0.36.1-0.20240418102245-0d3b36976680 18 Apr 2024 none — — Details →
v0.36.1-0.20240409114053-60815565aaaa 09 Apr 2024 none — — Details →
v0.36.1-0.20240405070152-cfa07c732877 05 Apr 2024 none — — Details →
v0.0.0-20240402103233-159b281dfc78 02 Apr 2024 none — — Details →
v0.36.0 02 Apr 2024 none — — Details →

The newest 120 of 235 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/fluxcd/pkg/oci

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/fluxcd/pkg/oci

Is github.com/fluxcd/pkg/oci safe to use?

Vulert has no vulnerabilities on record for github.com/fluxcd/pkg/oci in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/fluxcd/pkg/oci's Vulert package health score?

Vulert scores github.com/fluxcd/pkg/oci 80/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/fluxcd/pkg/oci affected?

No. v0.72.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

How many vulnerabilities does github.com/fluxcd/pkg/oci have?

0 vulnerabilities are recorded for github.com/fluxcd/pkg/oci in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/fluxcd/pkg/oci vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/fluxcd/pkg/oci in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/fluxcd/pkg/oci are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/fluxcd/pkg/oci for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/fluxcd/pkg/oci version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.