VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/github/hub: vulnerability history, versions and safety

github.com/github/hub is a package in the Go ecosystem. Vulert records 1 vulnerability for it across 120 releases, first recorded in Feb 2022. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
1 vulnerabilities recorded M1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/github/hub vulnerabilities

Vulert verdict on github.com/github/hub v2.11.2+incompatible i

Updated on 23 Oct 2026

Every vulnerability Vulert records for this package has a fix, and the newest was recorded 15 Feb 2022. Apply the fixes listed below and you are clear.

Package health score 74/100
  • Security Minor issues
  • Maintenance Slowing
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Move the affected dependencies to the fixed versions listed below, then keep the package monitored so the next vulnerability reaches you. Fix it, then keep watch: Vulert alerts you when a new vulnerability affects the version you run. Monitor it with Vulert →

  • Current release v2.11.2+incompatible — unaffected i
  • Vulnerabilities on record 1 over 1 year · 0 in the last year i
  • Latest disclosure 15 Feb 2022 i
  • Highest CVSS 4.4 i
  • With no published fix 0 i
  • Stars 22,958 i
  • OpenSSF scorecard 3/10 i
  • Last release 78 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/github/hub, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.12.3-0.20200413172250-d5dc53669cf4 13 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200413170950-8db8f617d121 13 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200413163316-289ee4e8ee4b 13 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200413105936-81ad4dd64bb8 13 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200413105936-c5e5d3f01449 13 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200413105936-d429ec23d71d 13 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200413103720-9712d70eea72 13 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200413004628-a2f70d7fa9af 13 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200413003150-425a75f368c3 13 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200403163959-f7a0bf113ac5 03 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200403075401-24a879d5ce1f 03 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200403075401-6f96cf38decf 03 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200403075401-95f8bb72beb7 03 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200403075356-5918d1c6dbb6 03 Apr 2020 M1 MIT Yes Details →
v1.12.3-0.20200320231541-04169cbf03b4 20 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200320231123-f7d08865e0f5 20 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200320223624-ac0ac7fb8e73 20 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200320223049-3e6191742d16 20 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200320221147-9c9a489b318e 20 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200316150136-2cff4c2adc24 16 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200316143816-54d77025903a 16 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200313105926-eeb9255d8e1e 13 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200312145101-ee7f9b42a355 12 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200309012055-8d9190420817 09 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200309012051-fb44a7ef9761 09 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200309011916-63a61d5f9665 09 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200309010538-288fe19b7343 09 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200307225803-8fedf618341c 07 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200307152204-8e6a7173874c 07 Mar 2020 M1 MIT Yes Details →
v0.0.0-20200305174823-a1b6bb179a13 05 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200305174823-a1b6bb179a13 05 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200305140311-5b7cf00a2bb1 05 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200305140246-d675a5ed42ff 05 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200305134230-dcec289400a1 05 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200305131305-323ec75ef770 05 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200303133144-6740f5c16329 03 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200301095211-64cfcdd19e75 01 Mar 2020 M1 MIT Yes Details →
v1.12.3-0.20200220015146-badc983ab52b 20 Feb 2020 M1 MIT Yes Details →
v1.12.3-0.20200219221538-3fb45107ec6d 19 Feb 2020 M1 MIT Yes Details →
v1.12.3-0.20200129133656-f3deae359320 29 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200129133130-2f1e6e091ec4 29 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200129132036-2b28a53b5bc2 29 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200127102351-d92a3108f729 27 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200125204420-c455473ad8da 25 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200125142115-33f929397c69 25 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200125141614-40e421edd2c6 25 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200125125802-572ea2990e16 25 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121160220-373d387eba9d 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121142856-340b79ac7840 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121142841-162fb0851e86 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121142841-9a5cde08cca6 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121142841-b4dfe6b0a2f7 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121142841-f8e32405fb86 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121132134-3bb72b9567fa 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121131432-46d12a8d7bea 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121131317-5932438a4ec5 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121131222-e66ef8d96e27 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121123900-5120359c90b4 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121123823-7e164d487e86 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121123117-2b471bd415f5 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121115500-57b8337db1c0 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121114856-f988235f7421 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121114255-b0db79dbf398 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121113455-c175488aa877 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121112257-153d8eda19c4 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121111645-65971925038a 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200121104643-d6a74bfb1e94 21 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200120221018-8b7c92e01278 20 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200120130433-4c8a27c11c50 20 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200119180348-ab374d9860a1 19 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200119144717-ddecc72b3f95 19 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200119135849-a6389b3a81f3 19 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200119135848-bf6e23683527 19 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200119135848-ddc966587834 19 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200119005230-5df6b31923e1 19 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200118181333-87da91aeefda 18 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200117135638-df829d42d56c 17 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200116184028-ff6b131d93b3 16 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200106194243-ae70177ac9a8 06 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20200104023734-fc2b4461ed8d 04 Jan 2020 M1 MIT Yes Details →
v1.12.3-0.20191230230319-b7b4a3df1de5 30 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191224104645-3344f0cec567 24 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191223150527-9822d1a0d904 23 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191216184253-a5fbf29be61a 16 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191216182843-c91307625b7d 16 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191215195924-4c2e44146988 15 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191215195614-8efca94d7ac2 15 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191215194924-c8e26daa2c5f 15 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191215194845-d147a422d493 15 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191215194811-dbecf7b0c8e5 15 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191215095016-f88ff18d718b 15 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191214223911-410e84156ff6 14 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191211181545-5c6dbb4a3b23 11 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191210111524-7b02a665ddac 10 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191205123013-abe06789dbcd 05 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191204094603-1cbb35250c2a 04 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191204083933-f91562d4a80d 04 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191203034009-1244ec235c12 03 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191203033626-e1247ccd6ae9 03 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191203033034-4b4843b3314d 03 Dec 2019 M1 MIT Yes Details →
v1.12.3-0.20191203025924-96cedc7f4e9c 03 Dec 2019 M1 — Yes Details →
v1.12.3-0.20191125190926-4786bcd81752 25 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191125190646-4d398ba98366 25 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191121201221-4f85bc36f587 21 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191121200444-4e60f9309da2 21 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191121200419-872c82a8fb5f 21 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191121200255-127f2d5a6718 21 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191121194152-c278240b3598 21 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191121191418-83a19478eecb 21 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191121191152-989726330232 21 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191117023027-05ad803de27a 17 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191117022215-9915cbd98110 17 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191117015209-493fc9cefd6f 17 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191117013747-c313ea8fe25a 17 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191117010613-7f124dfbee6b 17 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191117001957-58e8a890748b 17 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191115213133-14dc440aeefe 15 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191115210747-5d1b52e79db6 15 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191114230215-ec93940647a8 14 Nov 2019 M1 — Yes Details →
v1.12.3-0.20191114225911-d1107255155a 14 Nov 2019 M1 — Yes Details →

The newest 120 of 2,593 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 1 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/github/hub

The 1 most severe of 1 vulnerabilities recorded for this package

Search all 1 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2014-0177: Hub Package Arbitrary File Overwrite 4.4 medium 1.12.1 15 Feb 2022

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/github/hub

Is github.com/github/hub safe to use?

Vulert records 1 vulnerabilities for github.com/github/hub in Go: 0 critical, 0 high, 1 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/github/hub's Vulert package health score?

Vulert scores github.com/github/hub 74/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Which version of github.com/github/hub should I use?

v2.11.2+incompatible is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/github/hub have?

1 vulnerability is recorded for github.com/github/hub in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/github/hub vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/github/hub in the last 12 months, and the oldest entry in this database dates to 15 Feb 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/github/hub are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/github/hub for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/github/hub version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.