VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/go-vela/sdk-go: vulnerability history, versions and safety

github.com/go-vela/sdk-go is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from Mar 2024 to Jun 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded H1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/go-vela/sdk-go vulnerabilities

Vulert verdict on github.com/go-vela/sdk-go v0.28.3 i

Updated on 23 Oct 2026

Action needed: v0.28.3 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 69/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Little adoption
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.28.3 — affected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 05 Jun 2024 i
  • Highest CVSS 7.7 i
  • With no published fix 0 i
  • Stars 17 i
  • OpenSSF scorecard 6/10 i
  • Last release this month i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/go-vela/sdk-go, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.28.3 22 Oct 2026 H1 U1 Apache-2.0 Yes Details →
v0.28.2 20 Oct 2026 H1 U1 Apache-2.0 Yes Details →
v0.28.1 26 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.28.1-0.20260526194207-83df9236b666 26 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.28.0 31 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.28.0-rc5 23 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.28.0-rc4.0.20260323140948-a67e5ce57ffa 23 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.28.0-rc4 06 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.28.0-rc3 02 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.28.0-rc2 26 Feb 2026 H1 U1 Apache-2.0 Yes Details →
v0.28.0-rc1 25 Feb 2026 H1 U1 Apache-2.0 Yes Details →
v0.27.2-0.20260211182039-bc08b39ec6b8 11 Feb 2026 H1 U1 Apache-2.0 Yes Details →
v0.27.2-0.20260206210222-679cb21b266d 06 Feb 2026 H1 U1 Apache-2.0 Yes Details →
v0.27.2-0.20260203190443-c7ae4e25a718 03 Feb 2026 H1 U1 Apache-2.0 Yes Details →
v0.27.2-0.20251230154052-e1dae5f07d93 30 Dec 2025 H1 U1 Apache-2.0 Yes Details →
v0.27.2-0.20251215132955-99a6cc254ff7 15 Dec 2025 H1 U1 Apache-2.0 Yes Details →
v0.27.2-0.20251023182037-f8a9d8e9a0a9 23 Oct 2025 H1 U1 Apache-2.0 Yes Details →
v0.27.2-0.20250929210753-8aa86d4e80fa 29 Sep 2025 H1 U1 Apache-2.0 Yes Details →
v0.27.1 29 Aug 2025 H1 U1 Apache-2.0 Yes Details →
v0.27.1-0.20250826182024-d77976452001 26 Aug 2025 H1 U1 Apache-2.0 Yes Details →
v0.27.1-0.20250822171227-07d7ba2a3c5c 22 Aug 2025 H1 U1 Apache-2.0 Yes Details →
v0.27.1-0.20250822165943-9e87fa33539b 22 Aug 2025 H1 U1 Apache-2.0 Yes Details →
v0.27.0 30 Jul 2025 H1 U1 Apache-2.0 Yes Details →
v0.27.0-rc2 23 Jul 2025 H1 U1 Apache-2.0 Yes Details →
v0.27.0-rc1 02 Jul 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.3-0.20250702164652-949dba7ef8d6 02 Jul 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.3-0.20250506205517-a78afa8baa91 06 May 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.3-0.20250506200732-ff14a393e9b0 06 May 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.3-0.20250502215856-0f39456b80b7 02 May 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.3-0.20250414183522-fcaaf9b4639d 14 Apr 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.3-0.20250409163352-ea3001516a57 09 Apr 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.3-0.20250409022751-0f27f9202249 09 Apr 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.2 10 Mar 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.1 24 Feb 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.0 24 Jan 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.0-rc2 10 Jan 2025 H1 U1 Apache-2.0 Yes Details →
v0.25.2-0.20241022142543-b9de2ce2abea 22 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.2-0.20241018192247-0d47b4597aaf 18 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.2-0.20241011190403-7665967590a9 11 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.1 04 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.1-0.20241004162241-05703df6d40b 04 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0 02 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0-rc2.0.20241002152012-075e57979c6e 02 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0-rc1.0.20240926200715-571ee2905e01 26 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0-rc2 26 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.1-0.20240920152849-f6e97b863c94 20 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0-rc1 20 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.1-0.20240919191347-8673e4142a58 19 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.1-0.20240906142609-747bf8df428a 06 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0 24 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0-rc2.0.20240624220057-95ffb510c45b 24 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0-rc1.0.20240614161734-33ce9a10c930 14 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0-rc2 14 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3-0.20240605200821-276f5659baf5 05 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0-rc1 05 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3-0.20240605154217-db84c9aa1e55 05 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3-0.20240530143254-c6da5a00b4c3 30 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3-0.20240513192330-1d75672772e6 13 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3-0.20240508193030-1cd2e5cf3dbd 08 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3-0.20240507145321-54c8961e00a9 07 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3-0.20240424150003-64f8eb0ebcc0 24 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3-0.20240411165353-c3fdc7210625 11 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3-0.20240408141059-b3581213c0f2 08 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3 21 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3-0.20240321185713-c98e6006d23a 21 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3-0.20240319181130-4a7c245c93ae 19 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.2 12 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.2-0.20240312193129-4fa059aead18 12 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.2-0.20240312184917-e3a34719badf 12 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.1 23 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.1-0.20240223180109-4f88663f6bb9 23 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0 12 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc2.0.20240212203954-1cb0321b96ae 12 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc2.0.20240208171133-45785ef24cb3 08 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc1.0.20240202150503-21611b839a24 02 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc2 02 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc1.0.20240201212858-6fd0d75deed9 01 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240131194252-a0a2484138bc 31 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc1 31 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240131152341-b36c3e6c8e62 31 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240126152204-4dc89134e174 26 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240118151315-18ea1c51b5b2 18 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240117164808-7e6685a4a64a 17 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240110210525-4a16c9235b7a 10 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20231211213353-23e6a2ee9817 11 Dec 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0 13 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc2.0.20231113192250-51b27c4c9bfc 13 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc1.0.20231108160715-4a8595395bb7 08 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc2 08 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.1-0.20231103180124-b873eebe2022 03 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc1 03 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0 03 Oct 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0-rc2.0.20231003162544-f37b1aedd3e4 03 Oct 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0-rc1.0.20231002201105-f4068bcddcf1 02 Oct 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0-rc2 02 Oct 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230927201529-f2b797bdbaae 27 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0-rc1 27 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230926211649-173d614eb291 26 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230926162005-fe9cd4fb6060 26 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230925160153-e6031fe704d7 25 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.3 08 Sep 2023 H1 U1 — Yes Details →
v0.20.3-0.20230908150513-0aae503c9d12 08 Sep 2023 H1 U1 — Yes Details →
v0.20.2 07 Sep 2023 H1 U1 — Yes Details →
v0.20.2-0.20230907204812-9b6cdcbf0d56 07 Sep 2023 H1 U1 — Yes Details →
v0.20.1-0.20230824133536-0b0212b996f5 24 Aug 2023 H1 U1 — Yes Details →
v0.20.2-0.20230824133536-0b0212b996f5 24 Aug 2023 H1 U1 — Yes Details →
v0.20.1 27 Jul 2023 H1 U1 — Yes Details →
v0.20.1-0.20230727151344-9678a2f9db2f 27 Jul 2023 H1 U1 — Yes Details →
v0.20.0 17 Jul 2023 H1 U1 — Yes Details →
v0.20.0-rc3.0.20230717165238-a52d017de452 17 Jul 2023 H1 U1 — Yes Details →
v0.20.0-rc2.0.20230710164340-7480e69cf15b 10 Jul 2023 H1 U1 — Yes Details →
v0.20.0-rc3 10 Jul 2023 H1 U1 — Yes Details →
v0.20.0-rc1.0.20230710162057-b384dba40c40 10 Jul 2023 H1 U1 — Yes Details →
v0.20.0-rc2 10 Jul 2023 H1 U1 — Yes Details →
v0.20.0-rc1.0.20230622192232-f9031dad3dca 22 Jun 2023 H1 U1 — Yes Details →
v0.19.3-0.20230621190251-96c319fd06b7 21 Jun 2023 H1 U1 — Yes Details →
v0.20.0-rc1 21 Jun 2023 H1 U1 — Yes Details →
v0.19.3-0.20230621152001-98b0bc07c01b 21 Jun 2023 H1 U1 — Yes Details →
v0.19.3-0.20230609172535-4dfd42c3640a 09 Jun 2023 H1 U1 — Yes Details →
v0.19.3-0.20230608190643-2b87f248adfa 08 Jun 2023 H1 U1 — Yes Details →

The newest 120 of 311 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/go-vela/sdk-go

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
Insecure Variable Substitution in Golang SDK for Vela 7.7 high 0.23.2 15 Mar 2024
Insecure Variable Substitution in Golang SDK for Vela N/A unrated 0.23.2 05 Jun 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/go-vela/sdk-go

Is github.com/go-vela/sdk-go safe to use?

Vulert records 2 vulnerabilities for github.com/go-vela/sdk-go in Go: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/go-vela/sdk-go's Vulert package health score?

Vulert scores github.com/go-vela/sdk-go 69/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/go-vela/sdk-go affected?

Yes. v0.28.3, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does github.com/go-vela/sdk-go have?

2 vulnerabilities are recorded for github.com/go-vela/sdk-go in the Go ecosystem: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/go-vela/sdk-go vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/go-vela/sdk-go in the last 12 months, and the oldest entry in this database dates to 15 Mar 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/go-vela/sdk-go are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/go-vela/sdk-go for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/go-vela/sdk-go version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.