VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/go-vela/types: vulnerability history, versions and safety

github.com/go-vela/types is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from Mar 2024 to Jun 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded H1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/go-vela/types vulnerabilities

Vulert verdict on github.com/go-vela/types v0.26.1 i

Updated on 23 Oct 2026

Action needed: v0.26.1 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 42/100
  • Security Minor issues
  • Maintenance Deprecated
  • Popularity Little adoption
  • Community Quiet

The registry marks the latest release as deprecated, which caps this score.

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.26.1 — affected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 04 Jun 2024 i
  • Highest CVSS 7.7 i
  • With no published fix 0 i
  • Stars 25 i
  • OpenSSF scorecard 5/10 i
  • Last release 14 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/go-vela/types, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.26.1 05 Aug 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.1-0.20250409190207-20e4527aa9b5 09 Apr 2025 H1 U1 Apache-2.0 Yes Details →
v0.26.0 24 Jan 2025 H1 U1 Apache-2.0 Yes Details →
v0.25.2-0.20241030143032-3fb7af6c02dc 30 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.1 04 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.1-0.20241004145150-778773512c9c 04 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0 02 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0-rc2.0.20241002145944-cf39b24e78d9 02 Oct 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0-rc1.0.20240926191917-37acdd59dadd 26 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0-rc2 26 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0-rc1.0.20240926170829-15b43e56709f 26 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.1-0.20240920135703-2d20d54fd3d8 20 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.25.0-rc1 20 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.1-0.20240918185904-3065db46d060 18 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.1-0.20240913195205-4dbb9a5a70f2 13 Sep 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.1-0.20240826141537-76a66e72d5dc 26 Aug 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.1-0.20240813201820-772b29b91a5e 13 Aug 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.1-0.20240801155449-d47730bc9734 01 Aug 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.1-0.20240726161255-75a480864eca 26 Jul 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0 24 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0-rc2.0.20240624164915-e61aced84688 24 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0-rc1.0.20240614154006-35a80cf28676 14 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0-rc2 14 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240605181502-f69ce1273de4 05 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.24.0-rc1 05 Jun 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240516161114-57d6b8f77b10 16 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240508182005-88010b52190c 08 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240507194308-7c1c74175c50 07 May 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240417135026-fb4a95c30338 17 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240411201125-c5cba4ecf553 11 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240411193505-6f3bf586c30b 11 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240410201912-cabbb617296d 10 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240405205548-f24f795ac0b7 05 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240405190958-ea618bf19708 05 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240402153726-f16c3e4cb5fb 02 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240401132228-9b43c701ab32 01 Apr 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.4-0.20240326211542-476edfa844f0 26 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3 21 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3-0.20240321143352-e9cd33aaba61 21 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.3-0.20240314131620-b1970b932c9a 14 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.2 12 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.2-0.20240312183632-2e046fceb8fe 12 Mar 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.1 23 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.1-0.20240223150613-bab8877f4606 23 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0 08 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc2.0.20240208165447-3fe0d0291dc1 08 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc2.0.20240207224744-910c4bfb4ee1 07 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc2.0.20240206142409-825949399893 06 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc1.0.20240202144212-9f4c1b01b5d9 02 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc2 02 Feb 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240131192450-86cbe53c5175 31 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.23.0-rc1 31 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240125182149-1625a79ce6fb 25 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240122175704-d058de26b401 22 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240117200159-8a6ef2dcdbe2 17 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240117161717-f40578eb2dac 17 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240117151928-0e2e18b383de 17 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240115213421-a4d640c8760e 15 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240115212525-483bff0c8693 15 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240111192144-0d0e22367796 11 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20240105182535-a91bd54636bc 05 Jan 2024 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20231222174844-26e54c869418 22 Dec 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20231211143329-1eae2f5e371b 11 Dec 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20231208193136-23c15858da2a 08 Dec 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.1-0.20231127165528-b43cd77e4d9a 27 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0 08 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc1.0.20231108153839-e7d501937f46 08 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc2 08 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc1.0.20231107155504-ba41348d0fa9 07 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.1-0.20231103174211-c4fc61aa7619 03 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.22.0-rc1 03 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.1-0.20231103135144-ffb16ee0deac 03 Nov 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.1-0.20231024201126-19101a5b1346 24 Oct 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.1-0.20231012142227-0c0b890487af 12 Oct 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.1-0.20231009193454-b3cfe9cf9e30 09 Oct 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0 29 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0-rc1.0.20230929190211-b264d1cb6ae4 29 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0-rc2 29 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230927192440-4ae3d65d463e 27 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.21.0-rc1 27 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230926151838-42959d67d753 26 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230922185343-b83bcddfa60d 22 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230918203823-feb196d7ad3f 18 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230906184356-3829fd1ca79f 06 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2 06 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230906145339-bb6d56c41bab 06 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.3 06 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230901150720-4edd970bd38a 01 Sep 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230830142805-a94085e1466d 30 Aug 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.1-0.20230822144153-14b37585731d 22 Aug 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230822144153-14b37585731d 22 Aug 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230821135955-6b577f36fdfe 21 Aug 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.2-0.20230809155156-1e3aae6479b2 09 Aug 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.1 27 Jul 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.1-0.20230727142807-817025cd0e5f 27 Jul 2023 H1 U1 Apache-2.0 Yes Details →
v0.19.3-0.20230614134928-b1b57c0b34af 14 Jun 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.0 14 Jun 2023 H1 U1 Apache-2.0 Yes Details →
v0.20.0-rc1 14 Jun 2023 H1 U1 Apache-2.0 Yes Details →
v0.19.3-0.20230613152541-33175204a6a9 13 Jun 2023 H1 U1 Apache-2.0 Yes Details →
v0.19.3-0.20230612142147-a13b7ca8ce2c 12 Jun 2023 H1 U1 Apache-2.0 Yes Details →
v0.19.3-0.20230609151918-c0fb629998fb 09 Jun 2023 H1 U1 — Yes Details →
v0.19.3-0.20230607143546-fc9fd7b34b44 07 Jun 2023 H1 U1 — Yes Details →
v0.19.3-0.20230523200921-35a0d5fc088c 23 May 2023 H1 U1 — Yes Details →
v0.19.3-0.20230519215217-0da8c8b5e90f 19 May 2023 H1 U1 — Yes Details →
v0.19.3-0.20230519164715-71117bf90469 19 May 2023 H1 U1 — Yes Details →
v0.19.3-0.20230517165608-eb7c705a7534 17 May 2023 H1 U1 — Yes Details →
v0.19.3-0.20230516131722-f538de06bbf6 16 May 2023 H1 U1 — Yes Details →
v0.19.3-0.20230515193930-cb989d14b504 15 May 2023 H1 U1 — Yes Details →
v0.19.3-0.20230515192949-f8c0bb1b5fff 15 May 2023 H1 U1 — Yes Details →
v0.19.3-0.20230511200207-7b9f3fa265ca 11 May 2023 H1 U1 — Yes Details →
v0.19.3-0.20230509235306-12031186b20d 09 May 2023 H1 U1 — Yes Details →
v0.19.2 04 May 2023 H1 U1 — Yes Details →
v0.18.2-0.20230418185247-62f7b13fd6d3 18 Apr 2023 H1 U1 — Yes Details →
v0.19.0 18 Apr 2023 H1 U1 — Yes Details →
v0.19.0-rc1 18 Apr 2023 H1 U1 — Yes Details →
v0.19.1 18 Apr 2023 H1 U1 — Yes Details →
v0.18.2-0.20230407145744-676c45c911b5 07 Apr 2023 H1 U1 — Yes Details →
v0.18.2-0.20230321015315-6c723879639c 21 Mar 2023 H1 U1 — Yes Details →
v0.10.0-rc1.0.20230228170418-e55fdd4ffb05 28 Feb 2023 H1 U1 — Yes Details →
v0.17.1-0.20230228170418-e55fdd4ffb05 28 Feb 2023 H1 U1 — Yes Details →

The newest 120 of 452 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/go-vela/types

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
Insecure Variable Substitution in Vela Types 7.7 high 0.23.2 15 Mar 2024
Insecure Variable Substitution in github.com/go-vela/types N/A unrated 0.23.2 04 Jun 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/go-vela/types

Is github.com/go-vela/types safe to use?

Vulert records 2 vulnerabilities for github.com/go-vela/types in Go: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/go-vela/types's Vulert package health score?

Vulert scores github.com/go-vela/types 42/100, which reads as risky. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15). The registry marks the latest release as deprecated, which caps this score.

Is the latest version of github.com/go-vela/types affected?

Yes. v0.26.1, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/go-vela/types should I use?

v0.26.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/go-vela/types have?

2 vulnerabilities are recorded for github.com/go-vela/types in the Go ecosystem: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/go-vela/types vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/go-vela/types in the last 12 months, and the oldest entry in this database dates to 15 Mar 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/go-vela/types are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/go-vela/types for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/go-vela/types version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.