VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/go-vela/cli: vulnerability history, versions and safety

github.com/go-vela/cli is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from Mar 2024 to Jun 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded H1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/go-vela/cli vulnerabilities

Vulert verdict on github.com/go-vela/cli v0.28.2 i

Updated on 23 Oct 2026

Action needed: v0.28.2 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 71/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Little adoption
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.28.2 — affected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 04 Jun 2024 i
  • Highest CVSS 7.7 i
  • With no published fix 0 i
  • Stars 33 i
  • OpenSSF scorecard 7/10 i
  • Last release this month i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/go-vela/cli, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.28.2 22 Oct 2026 H1 U1 Apache-2.0 Yes Details →
v0.28.1 18 Aug 2026 H1 U1 Apache-2.0 Yes Details →
v0.28.0 01 Apr 2026 H1 U1 Apache-2.0 Yes Details →
v0.28.0-rc1 09 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.27.1-0.20250829195856-a35a2c54ac6d 29 Aug 2025 H1 U1 Apache-2.0 Yes Details →
v0.27.0 30 Jul 2025 H1 U1 Apache-2.0 Yes Details →
v0.27.0-rc1 07 Jul 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.2-0.20250610150520-1624c7f9d6ec 10 Jun 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.1 10 Mar 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.0 24 Jan 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.0-rc2 10 Jan 2025 H1 U1 Apache-2.0 Yes Details →
v0.25.2-0.20241022145046-55c73d46bd26 22 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.1 04 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.1-0.20241004164302-e8b493d48d2e 04 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0 02 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0-rc2.0.20241002154800-4ada644e01e4 02 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0-rc1.0.20240926202220-7b511c5d4771 26 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0-rc2 26 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.1-0.20240923160745-ec9f3b9e72de 23 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0-rc1 23 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.1-0.20240906153914-fcf8c8619053 06 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.1-0.20240823185019-32b3fc2e6664 23 Aug 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0 24 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0-rc2.0.20240624223423-a8047e1518fa 24 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0-rc1.0.20240614173032-fab1d5913ce1 14 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0-rc2 14 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240605211103-ce9383fae89a 05 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0-rc1 05 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240517154343-88582e2419eb 17 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240515170547-b1e221d7ebc3 15 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3 21 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.2 12 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.2-0.20240312194315-379fce689d07 12 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.2-0.20240312190104-0349a2060c35 12 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.1 23 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.1-0.20240212214907-da9523cb66c4 12 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0 12 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc2.0.20240209134134-ddb971f8774c 09 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc2.0.20240208175133-08b96be22d5e 08 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc1.0.20240202152326-c8476c7c98d0 02 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc2 02 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240131202903-ba1a5531a3a2 31 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc1 31 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1 12 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240112171937-1a00c3b4783d 12 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20231219152949-b0a65a6a5a66 19 Dec 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0 13 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc3.0.20231113194438-e4f3af76b77c 13 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc2.0.20231113164544-661960440053 13 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc3 13 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc1.0.20231108162826-f0754d0450b2 08 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc2 08 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.1-0.20231103200910-8f7e1db7f1df 03 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc1 03 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0 03 Oct 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0-rc2.0.20231003164416-f5f2b80d3785 03 Oct 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0-rc1.0.20231002203255-2a3ee4110cb5 02 Oct 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0-rc2 02 Oct 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230927203817-5c0b0fa88c35 27 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0-rc1 27 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.3 08 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.3-0.20230908152806-faf099202448 08 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2 08 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230908141346-a706bd41c1f6 08 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230905144617-010e3166b256 05 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.1 27 Jul 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.1-0.20230727162758-0b58688d9789 27 Jul 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.1-0.20230727142107-f6f95edc0909 27 Jul 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.0 17 Jul 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.0-rc2.0.20230717172438-00b511ed3570 17 Jul 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.0-rc1.0.20230710184128-c856e6170366 10 Jul 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.0-rc2 10 Jul 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.0-rc1.0.20230627170731-eead997183d8 27 Jun 2023 H1 U1 Apache-2.0 Yes Details →
v0.19.3-0.20230621192519-cd32f800f614 21 Jun 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.0-rc1 21 Jun 2023 H1 U1 Apache-2.0 Yes Details →
v0.19.2 15 May 2023 H1 U1 Apache-2.0 Yes Details →
v0.19.1 26 Apr 2023 H1 U1 Apache-2.0 Yes Details →
v0.19.0 25 Apr 2023 H1 U1 Apache-2.0 Yes Details →
v0.19.0-rc1.0.20230425160205-0137dd433828 25 Apr 2023 H1 U1 Apache-2.0 Yes Details →
v0.19.0-rc2 25 Apr 2023 H1 U1 Apache-2.0 Yes Details →
v0.18.3-0.20230418210932-3bad9799e1b4 18 Apr 2023 H1 U1 Apache-2.0 Yes Details →
v0.19.0-rc1 18 Apr 2023 H1 U1 Apache-2.0 Yes Details →
v0.18.2 09 Mar 2023 H1 U1 Apache-2.0 Yes Details →
v0.18.1 08 Mar 2023 H1 U1 Apache-2.0 Yes Details →
v0.18.0 06 Mar 2023 H1 U1 Apache-2.0 Yes Details →
v0.18.0-rc1.0.20230302191244-a51806063a8e 02 Mar 2023 H1 U1 Apache-2.0 Yes Details →
v0.18.0-rc2 01 Mar 2023 H1 U1 Apache-2.0 Yes Details →
v0.17.1-rc1.0.20230228195238-641fb4c22d9e 28 Feb 2023 H1 U1 Apache-2.0 Yes Details →
v0.18.0-rc1 28 Feb 2023 H1 U1 Apache-2.0 Yes Details →
v0.17.0 16 Dec 2022 H1 U1 Apache-2.0 Yes Details →
v0.16.3-0.20221214210448-b569e7a1b825 14 Dec 2022 H1 U1 Apache-2.0 Yes Details →
v0.17.1-rc1 14 Dec 2022 H1 U1 Apache-2.0 Yes Details →
v0.16.2 15 Nov 2022 H1 U1 Apache-2.0 Yes Details →
v0.16.1 09 Nov 2022 H1 U1 Apache-2.0 Yes Details →
v0.16.0 09 Nov 2022 H1 U1 Apache-2.0 Yes Details →
v0.15.1 07 Oct 2022 H1 U1 Apache-2.0 Yes Details →
v0.15.0 06 Oct 2022 H1 U1 Apache-2.0 Yes Details →
v0.15.0-rc1.0.20221004133355-7bc9cc6a78c5 04 Oct 2022 H1 U1 Apache-2.0 Yes Details →
v0.15.0-rc2 04 Oct 2022 H1 U1 Apache-2.0 Yes Details →
v0.14.2-0.20220927170656-3cc6ab723483 27 Sep 2022 H1 U1 Apache-2.0 Yes Details →
v0.15.0-rc1 27 Sep 2022 H1 U1 — Yes Details →
v0.14.1 01 Aug 2022 H1 U1 — Yes Details →
v0.14.0 22 Jun 2022 H1 U1 — Yes Details →
v0.14.0-rc2.0.20220615203134-19c4044c1905 15 Jun 2022 H1 U1 — Yes Details →
v0.14.0-rc3 15 Jun 2022 H1 U1 — Yes Details →
v0.14.0-rc1.0.20220603162438-059ec4def772 03 Jun 2022 H1 U1 — Yes Details →
v0.14.0-rc2 03 Jun 2022 H1 U1 — Yes Details →
v0.14.0-rc1.0.20220521174517-f3e7b06827eb 21 May 2022 H1 U1 — Yes Details →
v0.14.0-rc1.0.20220512152839-9e61767b3a4c 12 May 2022 H1 U1 — Yes Details →
v0.14.0-rc1.0.20220509134823-b9fbc8f2d009 09 May 2022 H1 U1 — Yes Details →
v0.13.3-0.20220503150350-ff80c8353fdc 03 May 2022 H1 U1 — Yes Details →
v0.14.0-rc1 03 May 2022 H1 U1 — Yes Details →
v0.13.3 02 May 2022 H1 U1 — Yes Details →
v0.13.3-0.20220429131914-cd2145718d49 29 Apr 2022 H1 U1 — Yes Details →
v0.13.3-0.20220428195040-d39feba99dfc 28 Apr 2022 H1 U1 — Yes Details →
v0.13.3-0.20220427214706-45fe8f14b955 27 Apr 2022 H1 U1 — Yes Details →
v0.13.3-0.20220425223031-40641306e368 25 Apr 2022 H1 U1 — Yes Details →
v0.13.3-0.20220422134010-5c0f857dc3dd 22 Apr 2022 H1 U1 — Yes Details →
v0.13.2 18 Apr 2022 H1 U1 — Yes Details →
v0.13.2-0.20220418132522-0a0754a6b3b5 18 Apr 2022 H1 U1 — Yes Details →

The newest 120 of 274 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/go-vela/cli

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
Insecure Variable Substitution in go-vela/cli 7.7 high 0.23.2 15 Mar 2024
Insecure Variable Substitution in github.com/go-vela/cli N/A unrated 0.23.2 04 Jun 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/go-vela/cli

Is github.com/go-vela/cli safe to use?

Vulert records 2 vulnerabilities for github.com/go-vela/cli in Go: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/go-vela/cli's Vulert package health score?

Vulert scores github.com/go-vela/cli 71/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/go-vela/cli affected?

Yes. v0.28.2, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does github.com/go-vela/cli have?

2 vulnerabilities are recorded for github.com/go-vela/cli in the Go ecosystem: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/go-vela/cli vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/go-vela/cli in the last 12 months, and the oldest entry in this database dates to 15 Mar 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/go-vela/cli are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/go-vela/cli for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/go-vela/cli version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.