Vulnerability Database · Go · Package report
github.com/golang-migrate/migrate/v4: vulnerability history, versions and safety
github.com/golang-migrate/migrate/v4 is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
See all github.com/golang-migrate/migrate/v4 vulnerabilities
Vulert verdict on github.com/golang-migrate/migrate/v4 v4.20.1 i
Updated on 23 Oct 2026
Good news: v4.20.1, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Sustainable
- Popularity Key ecosystem project
- Community Moderate
What to do: Stay on v4.20.1 or newer. This can change: a vulnerability disclosed tomorrow can affect v4.20.1 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v4.20.1 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 18,982 i
- OpenSSF scorecard 5/10 i
- Last release 1 month ago i
- Licence MIT i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/golang-migrate/migrate/v4, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v4.0.0-20260909045720-504568a3cbd2 09 Sep 2026
- v4.20.1 09 Sep 2026
- v4.20.1-0.20260909043021-2267cdafd6cb 09 Sep 2026
- v4.20.0 08 Sep 2026
- v4.19.2-0.20260907210054-5bcd0086b6b4 07 Sep 2026
- v4.19.2-0.20260907202409-b9479620d4c1 07 Sep 2026
- v4.19.2-0.20260904211539-371f5c2a0c58 04 Sep 2026
- v4.19.2-0.20260831235754-01a9643f1475 31 Aug 2026
- v4.19.2-0.20260831232445-73c7adc1eda1 31 Aug 2026
- v4.19.2-0.20260829133428-77249860b9d8 29 Aug 2026
- v4.19.2-0.20260705165218-18966c755f83 05 Jul 2026
- v4.19.2-0.20260704230727-8a4b4bbb592c 04 Jul 2026
- v4.19.2-0.20260701054612-d30bf23cb774 01 Jul 2026
- v4.19.2-0.20260701044846-3add8f4cb693 01 Jul 2026
- v4.19.2-0.20260311075010-2bd822b3aad4 11 Mar 2026
- v4.19.2-0.20260301204732-1620c56290a0 01 Mar 2026
- v4.19.2-0.20251214231648-257fa847d614 14 Dec 2025
- v4.19.2-0.20251214231446-001b70ac7dc1 14 Dec 2025
- v4.19.1 29 Nov 2025
- v4.19.1-0.20251129193742-89e308c340a2 29 Nov 2025
- v4.19.1-0.20251127085621-472ef2e75cf6 27 Nov 2025
- v4.19.1-0.20251127065208-a371c8ea2b67 27 Nov 2025
- v4.19.1-0.20251119070452-70e6d6d57408 19 Nov 2025
- v4.19.1-0.20251114214648-3f583f0b61c7 14 Nov 2025
- v4.19.1-0.20251109054801-39ab04d659fd 09 Nov 2025
- v4.18.4-0.20250824032753-8b9c5f77128e 24 Aug 2025
- v4.19.0 24 Aug 2025
- v4.18.4-0.20250823201217-ed4bdd4614e9 23 Aug 2025
- v4.18.4-0.20250820233525-8945e853c4c8 20 Aug 2025
- v4.18.4-0.20250819232409-7108d806dd50 19 Aug 2025
- v4.18.4-0.20250819212216-682016f04c2c 19 Aug 2025
- v4.18.4-0.20250425201427-278833935c12 25 Apr 2025
- v4.18.3 17 Apr 2025
- v4.18.3-0.20250417222139-9023d66a0b64 17 Apr 2025
- v4.18.3-0.20250417071246-a3b7633246f2 17 Apr 2025
- v4.18.3-0.20250417023914-3c3ce91f29e7 17 Apr 2025
- v4.18.3-0.20250416223509-1af841d787e6 16 Apr 2025
- v4.18.3-0.20250323235414-604248c97e5f 23 Mar 2025
- v4.18.3-0.20250220001912-36d17ba2ecc3 20 Feb 2025
- v4.18.2 27 Jan 2025
- v4.18.2-0.20250127015305-d477553dcd9a 27 Jan 2025
- v4.18.2-0.20250127010455-7651c8a37ed0 27 Jan 2025
- v4.18.2-0.20250126234611-12c619ee47b7 26 Jan 2025
- v4.18.2-0.20250126050533-bc06922b4de8 26 Jan 2025
- v4.18.2-0.20240923174556-c378583d782e 23 Sep 2024
- v4.18.2-0.20240912161234-e22d0128ccf1 12 Sep 2024
- v4.18.1 08 Sep 2024
- v4.18.1-0.20240908210251-555501f7cdbf 08 Sep 2024
- v4.18.0 08 Sep 2024
- v4.17.2-0.20240908060701-1e02b42a7a32 08 Sep 2024
- v4.17.2-0.20240907070137-d28e549a68d5 07 Sep 2024
- v4.17.2-0.20240907064624-897be38496b5 07 Sep 2024
- v4.17.2-0.20240907063235-1b1c6f6d1406 07 Sep 2024
- v4.17.2-0.20240906074125-f44379d6f1b3 06 Sep 2024
- v4.17.2-0.20240610194613-2477f639fdba 10 Jun 2024
- v4.17.2-0.20240531153006-c81eaf79183b 31 May 2024
- v4.17.2-0.20240430045922-04b36ebaac41 30 Apr 2024
- v4.17.1 17 Apr 2024
- v4.17.1-0.20240417061625-0c456c49a6de 17 Apr 2024
- v4.17.1-0.20240417060336-f1002267588a 17 Apr 2024
- v4.17.1-0.20240416203831-837776f0c788 16 Apr 2024
- v4.17.1-0.20240416065405-1a002d0e9e86 16 Apr 2024
- v4.17.1-0.20240415071736-2884a8e8517a 15 Apr 2024
- v4.17.1-0.20240325053139-87ba13c3985d 25 Mar 2024
- v4.0.0-20240111045610-a5dc5d1efc69 11 Jan 2024
- v4.17.1-0.20240111045610-a5dc5d1efc69 11 Jan 2024
- v4.0.0-20240102204802-0d4158977486 02 Jan 2024
- v4.17.1-0.20240102204802-0d4158977486 02 Jan 2024
- v4.17.1-0.20231231215938-516f038f30f4 31 Dec 2023
- v4.0.0-20231220221336-0815e2d77000 20 Dec 2023
- v4.17.1-0.20231220221336-0815e2d77000 20 Dec 2023
- v4.17.1-0.20231220211207-5aa4670cbbe7 20 Dec 2023
- v4.17.1-0.20231220204933-d63a5c2c28fa 20 Dec 2023
- v4.17.0 20 Dec 2023
- v4.16.3-0.20231220082814-691f687eb895 20 Dec 2023
- v4.16.3-0.20231220071013-0ba6fc316645 20 Dec 2023
- v4.16.3-0.20231219173343-7d03609443c8 19 Dec 2023
- v4.16.3-0.20231219080227-b56728763786 19 Dec 2023
- v4.16.3-0.20231219074405-4078ef894116 19 Dec 2023
- v4.16.3-0.20231219055857-7eac9190d4e0 19 Dec 2023
- v4.16.3-0.20231214161313-669437c3b8d4 14 Dec 2023
- v4.16.3-0.20231128000524-5163ac782428 28 Nov 2023
- v4.16.3-0.20231114040455-72957b696647 14 Nov 2023
- v4.0.0-20230706060513-856ea12df9d2 06 Jul 2023
- v4.14.2-0.20230706060513-856ea12df9d2 06 Jul 2023
- v4.16.3-0.20230706060513-856ea12df9d2 06 Jul 2023
- v4.16.3-0.20230703052238-bad30b549d46 03 Jul 2023
- v4.16.2 11 Jun 2023
- v4.16.2-0.20230611213647-691bc773cc0f 11 Jun 2023
- v4.16.2-0.20230609225857-383386b35f83 09 Jun 2023
- v4.0.0-20230607043303-315a205b597d 07 Jun 2023
- v4.15.3-0.20230607043303-315a205b597d 07 Jun 2023
- v4.16.1-0.20230607043303-315a205b597d 07 Jun 2023
- v4.16.2-0.20230607043303-315a205b597d 07 Jun 2023
- v4.16.1 05 Jun 2023
- v4.16.1-0.20230605045201-23d8d33f5743 05 Jun 2023
- v4.16.1-0.20230531051525-f9c067b3e097 31 May 2023
- v4.15.3-0.20230527233956-c62dbbacc24c 27 May 2023
- v4.16.0 27 May 2023
- v4.15.3-0.20230520212101-ea8bebc7ef85 20 May 2023
- v4.15.3-0.20230520073456-1020682de54a 20 May 2023
- v4.15.3-0.20230426220950-d72e5c6096c8 26 Apr 2023
- v4.0.0-20230407054901-84009cf2ab46 07 Apr 2023
- v4.15.3-0.20230407054901-84009cf2ab46 07 Apr 2023
- v4.15.3-0.20230405173354-e968557bc6e9 05 Apr 2023
- v4.15.3-0.20230405045842-5be1166fa39d 05 Apr 2023
- v4.15.3-0.20230405045701-b94ed1a710af 05 Apr 2023
- v4.15.3-0.20230326064632-c34675fa546b 26 Mar 2023
- v4.15.3-0.20230325083214-586c129bae77 25 Mar 2023
- v4.15.3-0.20230325061840-b63a0d4880eb 25 Mar 2023
- v4.0.0-20230315220536-8ec04221b49d 15 Mar 2023
- v4.15.3-0.20230315220536-8ec04221b49d 15 Mar 2023
- v4.15.3-0.20230315073307-952f3f046e60 15 Mar 2023
- v4.15.3-0.20230309061255-7cacfc20803a 09 Mar 2023
- v4.15.3-0.20230301153529-e5d8970cd05e 01 Mar 2023
- v4.15.3-0.20230111075136-dc26c41ac9da 11 Jan 2023
- v4.15.3-0.20230111073356-145baa187d61 11 Jan 2023
- v4.15.3-0.20221230190810-eb59b750e8b9 30 Dec 2022
- v4.15.2-0.20221206080518-c9ff76f294c6 06 Dec 2022
- v4.15.3-0.20221206080518-c9ff76f294c6 06 Dec 2022
The newest 120 of 333 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/golang-migrate/migrate/v4
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/golang-migrate/migrate/v4
Is github.com/golang-migrate/migrate/v4 safe to use?
Vulert has no vulnerabilities on record for github.com/golang-migrate/migrate/v4 in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/golang-migrate/migrate/v4's Vulert package health score?
Vulert scores github.com/golang-migrate/migrate/v4 91/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/golang-migrate/migrate/v4 affected?
No. v4.20.1, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of github.com/golang-migrate/migrate/v4 should I use?
v4.20.1 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does github.com/golang-migrate/migrate/v4 have?
0 vulnerabilities are recorded for github.com/golang-migrate/migrate/v4 in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/golang-migrate/migrate/v4 vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/golang-migrate/migrate/v4 in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/golang-migrate/migrate/v4 are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/golang-migrate/migrate/v4 for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/golang-migrate/migrate/v4 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.