VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/go-yaml/yaml: vulnerability history, versions and safety

github.com/go-yaml/yaml is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/go-yaml/yaml vulnerabilities

Vulert verdict on github.com/go-yaml/yaml v2.1.0+incompatible i

Updated on 23 Oct 2026

Good news: v2.1.0+incompatible, the version you would install today, has no known vulnerabilities.

Package health score 63/100
  • Security Minor issues
  • Maintenance Unmaintained
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Stay on v2.1.0+incompatible or newer. This can change: a vulnerability disclosed tomorrow can affect v2.1.0+incompatible too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v2.1.0+incompatible — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 7,017 i
  • OpenSSF scorecard 3/10 i
  • Last release 103 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/go-yaml/yaml, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20180223190116-3e6d767784b0 23 Feb 2018 none Apache-2.0 — Details →
v2.0.0-20180223190116-3e6d767784b0+incompatible 23 Feb 2018 none Apache-2.0 — Details →
v2.1.0+incompatible 23 Feb 2018 none Apache-2.0 — Details →
v2.0.1-0.20180223185557-3eb2270747cd+incompatible 23 Feb 2018 none Apache-2.0 — Details →
v0.0.0-20180112155414-a64b82147302 12 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180112145418-8ed39f36d6f3 12 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180109114331-d670f9405373 09 Jan 2018 none Apache-2.0 — Details →
v2.0.0+incompatible 09 Jan 2018 none Apache-2.0 — Details →
v2.0.0-20180109114331-d670f9405373+incompatible 09 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180109113645-1f1f61830e4c 09 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180109110746-60a2abf4e003 09 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180109101735-031c922227a5 09 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180109101311-b7fbda999004 09 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180108220553-cdd36ee8d333 08 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180108220442-ab5d55c35f39 08 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180108220406-3c68098bffba 08 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180108162402-87e4a22b6842 08 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180108155118-1f2a25ba9402 08 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180108155050-a72a87d92dad 08 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180108154742-7b079234548b 08 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180108145114-0a6d1b02c16e 08 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180108131554-1244d3ce02e3 08 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180108113715-4341420a1443 08 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180108091053-77b384eced77 08 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180108090535-5edc3ded4138 08 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180107223439-e4ac4c457c23 07 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180107221807-c4a9fb418357 07 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180105161841-9e27074feeae 05 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180105161827-39e59aa7e158 05 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180105145455-fe9486c37432 05 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180105144619-18e5f12b39cb 05 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180105121059-0ee36981cbf4 05 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180105115026-8e626dec39b5 05 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180105114817-73a1567027ee 05 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180104200107-add015b1c64e 04 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180104195722-0e4404da7122 04 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180104195650-d6b533826727 04 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20180102123842-c95af922eae6 02 Jan 2018 none Apache-2.0 — Details →
v0.0.0-20171212215049-7cdd87a79f79 12 Dec 2017 none Apache-2.0 — Details →
v0.0.0-20171116090243-287cf08546ab 16 Nov 2017 none Apache-2.0 — Details →
v2.0.0-20171116090243-287cf08546ab+incompatible 16 Nov 2017 none Apache-2.0 — Details →
v0.0.0-20171116085955-2c9db3558be7 16 Nov 2017 none Apache-2.0 — Details →
v0.0.0-20171112172816-08434a82b837 12 Nov 2017 none Apache-2.0 — Details →
v0.0.0-20170911211118-283fbcdd1e64 11 Sep 2017 none Apache-2.0 — Details →
v0.0.0-20170812160011-eb3733d160e7 12 Aug 2017 none Apache-2.0 — Details →
v2.0.0-20170812160011-eb3733d160e7+incompatible 12 Aug 2017 none Apache-2.0 — Details →
v0.0.0-20170721163846-422f540d2e1f 21 Jul 2017 none Apache-2.0 — Details →
v0.0.0-20170721122434-c75e52ecee48 21 Jul 2017 none Apache-2.0 — Details →
v0.0.0-20170721122051-25c4ec802a7d 21 Jul 2017 none Apache-2.0 — Details →
v0.0.0-20170721120327-e9bfed595636 21 Jul 2017 none Apache-2.0 — Details →
v0.0.0-20170721113624-670d4cfef054 21 Jul 2017 none Apache-2.0 — Details →
v0.0.0-20170721100956-7ddc4634ce2d 21 Jul 2017 none Apache-2.0 — Details →
v0.0.0-20170721092657-d56ec34a3ded 21 Jul 2017 none Apache-2.0 — Details →
v0.0.0-20170721085556-835086a6b6aa 21 Jul 2017 none Apache-2.0 — Details →
v0.0.0-20170713201520-3b4ad1db5b2a 13 Jul 2017 none Apache-2.0 — Details →
v0.0.0-20170712054546-1be3d31502d6 12 Jul 2017 none Apache-2.0 — Details →
v0.0.0-20170712054415-f8db564a0a4a 12 Jul 2017 none Apache-2.0 — Details →
v0.0.0-20170626233729-e72f93569ef8 26 Jun 2017 none Apache-2.0 — Details →
v0.0.0-20170626233645-f59f5e67022f 26 Jun 2017 none Apache-2.0 — Details →
v0.0.0-20170506194503-a311394a2a92 06 May 2017 none Apache-2.0 — Details →
v0.0.0-20170427093547-f2d2788ce5b1 27 Apr 2017 none Apache-2.0 — Details →
v0.0.0-20170407172122-cd8b52f8269e 07 Apr 2017 none Apache-2.0 — Details →
v2.0.0-20170407172122-cd8b52f8269e+incompatible 07 Apr 2017 none Apache-2.0 — Details →
v3.0.0-20170407172122-cd8b52f8269e+incompatible 07 Apr 2017 none Apache-2.0 — Details →
v0.0.0-20170208141851-a3f3340b5840 08 Feb 2017 none Apache-2.0 — Details →
v0.0.0-20170125143719-4c78c975fe7c 25 Jan 2017 none Apache-2.0 — Details →
v0.0.0-20170124162511-14227de293ca 24 Jan 2017 none Apache-2.0 — Details →
v0.0.0-20160928153709-a5b47d31c556 28 Sep 2016 none Apache-2.0 — Details →
v0.0.0-20160912165603-31c299268d30 12 Sep 2016 none Apache-2.0 — Details →
v0.0.0-20160715033755-e4d366fc3c79 15 Jul 2016 none Apache-2.0 — Details →
v0.0.0-20160301204022-a83829b6f129 01 Mar 2016 none LGPL-3.0 — Details →
v2.0.0-20160301204022-a83829b6f129+incompatible 01 Mar 2016 none LGPL-3.0 — Details →
v0.0.0-20160301203336-b6679148d270 01 Mar 2016 none LGPL-3.0 — Details →
v0.0.0-20160301203201-d6c23fbaf16f 01 Mar 2016 none LGPL-3.0 — Details →
v0.0.0-20160301202645-65622dcbf4c2 01 Mar 2016 none LGPL-3.0 — Details →
v0.0.0-20151222231114-406cad6bb47d 22 Dec 2015 none LGPL-3.0 — Details →
v0.0.0-20151220141650-a833012353d0 20 Dec 2015 none LGPL-3.0 — Details →
v0.0.0-20151201162745-f7716cbe52ba 01 Dec 2015 none LGPL-3.0 — Details →
v0.0.0-20151201154120-bd61a856f807 01 Dec 2015 none LGPL-3.0 — Details →
v0.0.0-20150924150441-e90bcf783f7a 24 Sep 2015 none LGPL-3.0 — Details →
v0.0.0-20150924142314-53feefa2559f 24 Sep 2015 none LGPL-3.0 — Details →
v0.0.0-20150924133018-2bf60357b89c 24 Sep 2015 none LGPL-3.0 — Details →
v0.0.0-20150924130133-c325d146e464 24 Sep 2015 none LGPL-3.0 — Details →
v0.0.0-20150818182951-0516c53462e6 18 Aug 2015 none LGPL-3.0 — Details →
v0.0.0-20150624102902-7ad95dd0798a 24 Jun 2015 none LGPL-3.0 — Details →
v0.0.0-20150601145226-b9b22c434500 01 Jun 2015 none LGPL-3.0 — Details →
v0.0.0-20150525212417-9eade332f0ce 25 May 2015 none LGPL-3.0 — Details →
v0.0.0-20150519104233-c1cd2254a6dd 19 May 2015 none LGPL-3.0 — Details →
v0.0.0-20150519103858-43a0256bb22b 19 May 2015 none LGPL-3.0 — Details →
v0.0.0-20150224225758-49c95bdc2184 24 Feb 2015 none LGPL-3.0 — Details →
v2.0.0-20150224225758-49c95bdc2184+incompatible 24 Feb 2015 none LGPL-3.0 — Details →
v0.0.0-20150224225331-d0fefed9b627 24 Feb 2015 none LGPL-3.0 — Details →
v0.0.0-20150224182413-50f7813e6b19 24 Feb 2015 none LGPL-3.0 — Details →
v0.0.0-20150211173125-a1c4bcb6c278 11 Feb 2015 none LGPL-3.0 — Details →
v0.0.0-20150211172759-df747160af0e 11 Feb 2015 none LGPL-3.0 — Details →
v0.0.0-20150209164726-ee2f4956ea46 09 Feb 2015 none LGPL-3.0 — Details →
v0.0.0-20150204121535-a347d2466e45 04 Feb 2015 none LGPL-3.0 — Details →
v0.0.0-20150204121121-1d653a737648 04 Feb 2015 none LGPL-3.0 — Details →
v0.0.0-20150119185552-5d6f7e02b7cd 19 Jan 2015 none LGPL-3.0 — Details →
v0.0.0-20150116202057-bef53efd0c76 16 Jan 2015 none LGPL-3.0 — Details →
v0.0.0-20150116195822-1bf6a7ce1540 16 Jan 2015 none — — Details →
v0.0.0-20150116192223-71e7ede9d48a 16 Jan 2015 none — — Details →
v0.0.0-20150116191007-b7dfe2d918fd 16 Jan 2015 none — — Details →
v0.0.0-20150116190251-e8976af76e3d 16 Jan 2015 none — — Details →
v0.0.0-20150116185936-088598405c86 16 Jan 2015 none — — Details →
v0.0.0-20150116184558-26b882523374 16 Jan 2015 none — — Details →
v0.0.0-20141212163832-4f03e946c120 12 Dec 2014 none — — Details →
v0.0.0-20141105181037-3e92d6a11b92 05 Nov 2014 none — — Details →
v0.0.0-20141029210843-d466437aa4ad 29 Oct 2014 none — — Details →
v0.0.0-20141029204257-1dd72ac39286 29 Oct 2014 none — — Details →
v0.0.0-20140927204003-eca94c41d994 27 Sep 2014 none — — Details →
v0.0.0-20140925123300-f5f5cc19d1f6 25 Sep 2014 none — — Details →
v0.0.0-20140924161800-79f5ef7c40ae 24 Sep 2014 none — — Details →
v0.0.0-20140924161607-9f9df34309c0 24 Sep 2014 none — — Details →
v0.0.0-20140923144913-b6b591a3c0ec 23 Sep 2014 none — — Details →
v0.0.0-20140922215045-de3643d77b43 22 Sep 2014 none — — Details →
v0.0.0-20140922213356-91eb945ac021 22 Sep 2014 none — — Details →
v0.0.0-20140922213225-bec87e4332ae 22 Sep 2014 none — — Details →
v0.0.0-20140922213154-925f818e2c35 22 Sep 2014 none — — Details →
v0.0.0-20140919233558-b51f82a2e3cb 19 Sep 2014 none — — Details →

The newest 120 of 252 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/go-yaml/yaml

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/go-yaml/yaml

Is github.com/go-yaml/yaml safe to use?

Vulert has no vulnerabilities on record for github.com/go-yaml/yaml in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/go-yaml/yaml's Vulert package health score?

Vulert scores github.com/go-yaml/yaml 63/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/go-yaml/yaml affected?

No. v2.1.0+incompatible, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of github.com/go-yaml/yaml should I use?

v2.1.0+incompatible is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/go-yaml/yaml have?

0 vulnerabilities are recorded for github.com/go-yaml/yaml in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/go-yaml/yaml vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/go-yaml/yaml in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/go-yaml/yaml are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/go-yaml/yaml for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/go-yaml/yaml version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.