VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/google/exposure-notifications-server: vulnerability history, versions and safety

github.com/google/exposure-notifications-server is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from May 2021 to Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded M1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/google/exposure-notifications-server vulnerabilities

Vulert verdict on github.com/google/exposure-notifications-server v1.17.0 i

Updated on 23 Oct 2026

Action needed: v1.17.0 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 75/100
  • Security Minor issues
  • Maintenance Maintaining
  • Popularity Key ecosystem project
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.17.0 — affected i
  • Vulnerabilities on record 2 over 3 years · 0 in the last year i
  • Latest disclosure 21 Aug 2024 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 2,585 i
  • OpenSSF scorecard 4/10 i
  • Last release 43 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/google/exposure-notifications-server, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.17.1-0.20230629153153-2041f77a0bda 29 Jun 2023 M1 U1 Apache-2.0 Yes Details →
v1.16.1-0.20230227222731-36ebe2015d51 27 Feb 2023 M1 U1 Apache-2.0 Yes Details →
v1.17.0 27 Feb 2023 M1 U1 Apache-2.0 Yes Details →
v1.15.1-0.20230103134532-f06599f320a5 03 Jan 2023 M1 U1 Apache-2.0 Yes Details →
v1.16.0 03 Jan 2023 M1 U1 Apache-2.0 Yes Details →
v1.14.1-0.20221128215310-97d0b99b9b15 28 Nov 2022 M1 U1 Apache-2.0 Yes Details →
v1.15.0 28 Nov 2022 M1 U1 Apache-2.0 Yes Details →
v1.14.0 10 Oct 2022 M1 U1 Apache-2.0 Yes Details →
v1.13.0 12 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.12.1-0.20220808184754-3fe8ef98e470 08 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.12.0 04 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.11.1-0.20220718200221-5411b07c7104 18 Jul 2022 M1 U1 Apache-2.0 Yes Details →
v1.11.1-0.20220718192005-c49faaa84ac8 18 Jul 2022 M1 U1 Apache-2.0 Yes Details →
v1.11.0 13 Jul 2022 M1 U1 Apache-2.0 Yes Details →
v1.10.1-0.20220707120614-5ae03dfe093e 07 Jul 2022 M1 U1 Apache-2.0 Yes Details →
v1.10.0 02 Jun 2022 M1 U1 Apache-2.0 Yes Details →
v1.9.1-0.20220515173614-9dcc2fc53792 15 May 2022 M1 U1 Apache-2.0 Yes Details →
v1.9.1-0.20220502192432-162cbaadfd29 02 May 2022 M1 U1 Apache-2.0 Yes Details →
v1.8.2-0.20220424144107-9b73ca040965 24 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v1.9.0 24 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v1.8.1 08 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v1.8.1-0.20220408175132-008def205c94 08 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v1.8.1-0.20220407152135-deb46aa85f03 07 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v1.7.1-0.20220325170131-7882d625c3a1 25 Mar 2022 M1 U1 Apache-2.0 Yes Details →
v1.8.0 25 Mar 2022 M1 U1 Apache-2.0 Yes Details →
v1.7.0 28 Feb 2022 M1 U1 Apache-2.0 Yes Details →
v1.6.0 31 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v1.5.0 18 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v1.4.1-0.20220114223135-ed815c0285e2 14 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v1.4.1-0.20220113220604-24905c93fdc7 13 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v1.4.1-0.20220112200652-7ebc8d0d78ed 12 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v1.4.1-0.20220112190604-870f664922ea 12 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v1.4.1-0.20220112175310-8b0e8290164e 12 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v1.4.1-0.20220112135827-878fd948c3a5 12 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v1.3.1-0.20220110200204-38e71578c98e 10 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v1.4.0 10 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v1.3.1-0.20211226222908-00757706a008 26 Dec 2021 M1 U1 Apache-2.0 Yes Details →
v1.3.1-0.20211221181654-df9df5ab3dcf 21 Dec 2021 M1 U1 Apache-2.0 Yes Details →
v1.3.1-0.20211214225725-34e272b8db19 14 Dec 2021 M1 U1 Apache-2.0 Yes Details →
v1.3.1-0.20211214181451-2fb91b1c3535 14 Dec 2021 M1 U1 Apache-2.0 Yes Details →
v1.2.1-0.20211119155759-7d14c4c5979e 19 Nov 2021 M1 U1 Apache-2.0 Yes Details →
v1.3.0 19 Nov 2021 M1 U1 Apache-2.0 Yes Details →
v1.1.1-0.20211112024407-692544bf0d47 12 Nov 2021 M1 U1 Apache-2.0 Yes Details →
v1.2.0 12 Nov 2021 M1 U1 Apache-2.0 Yes Details →
v1.1.1-0.20211111163555-76bff626e3b6 11 Nov 2021 M1 U1 Apache-2.0 Yes Details →
v1.1.1-0.20211108182655-f62aafb8d1b0 08 Nov 2021 M1 U1 Apache-2.0 Yes Details →
v1.1.0 01 Nov 2021 M1 U1 Apache-2.0 Yes Details →
v1.0.1-0.20211024155652-de840f5beac5 24 Oct 2021 M1 U1 Apache-2.0 Yes Details →
v1.0.1-0.20211021220610-967e4a95d360 21 Oct 2021 M1 U1 Apache-2.0 Yes Details →
v1.0.1-0.20211016202833-65dc53630188 16 Oct 2021 M1 U1 Apache-2.0 Yes Details →
v1.0.1-0.20211007180031-d33d33ef7d7e 07 Oct 2021 M1 U1 Apache-2.0 Yes Details →
v1.0.1-0.20211007174043-f0dc9ccf904d 07 Oct 2021 M1 U1 Apache-2.0 Yes Details →
v1.0.1-0.20210929214641-1a898d486dc0 29 Sep 2021 M1 U1 Apache-2.0 Yes Details →
v0.37.1-0.20210928001352-e9e4f9f4ef5e 28 Sep 2021 M1 U1 Apache-2.0 Yes Details →
v1.0.0 28 Sep 2021 M1 U1 Apache-2.0 Yes Details →
v0.37.1-0.20210927222057-ac4d047af770 27 Sep 2021 M1 U1 Apache-2.0 Yes Details →
v0.37.1-0.20210926235431-b695be1f9fcb 26 Sep 2021 M1 U1 Apache-2.0 Yes Details →
v0.37.0 10 Sep 2021 M1 U1 Apache-2.0 Yes Details →
v0.36.1-0.20210903235203-5bc4cafd8fea 03 Sep 2021 M1 U1 Apache-2.0 Yes Details →
v0.36.1-0.20210901153213-b44b4ca3487a 01 Sep 2021 M1 U1 Apache-2.0 Yes Details →
v0.36.0 30 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.35.1-0.20210827195618-3cc443587c21 27 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.35.1-0.20210827194843-77229703e292 27 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.35.1-0.20210827192545-0d9e9a430c97 27 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.35.1-0.20210827161311-4d04c6813976 27 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.35.1-0.20210826210330-607ff1acb7ca 26 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.35.1-0.20210826170655-dbd3c538b6df 26 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.35.1-0.20210825162742-be31820c7148 25 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.35.1-0.20210818171456-e90a92bf7dd0 18 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.35.1-0.20210818150701-542dc61ba081 18 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.35.0 12 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.34.1-0.20210809225228-b6dc1aeb17b4 09 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.34.1-0.20210805183820-b0016757bf72 05 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.34.1-0.20210804215831-6fa52e62e20d 04 Aug 2021 M1 U1 Apache-2.0 Yes Details →
v0.34.0 23 Jul 2021 M1 U1 Apache-2.0 Yes Details →
v0.33.0 19 Jul 2021 M1 U1 Apache-2.0 Yes Details →
v0.32.0 25 Jun 2021 M1 U1 Apache-2.0 Yes Details →
v0.31.1-0.20210621215006-7fab5f0b58e9 21 Jun 2021 M1 U1 Apache-2.0 Yes Details →
v0.30.1-0.20210617152217-6eb651698c8c 17 Jun 2021 M1 U1 Apache-2.0 Yes Details →
v0.31.0 17 Jun 2021 M1 U1 Apache-2.0 Yes Details →
v0.30.1-0.20210616152359-5f211c08163b 16 Jun 2021 M1 U1 Apache-2.0 Yes Details →
v0.30.1-0.20210616152352-c294db579e4c 16 Jun 2021 M1 U1 Apache-2.0 Yes Details →
v0.30.1-0.20210614171717-890e5f5ef4f5 14 Jun 2021 M1 U1 Apache-2.0 Yes Details →
v0.30.1-0.20210614152653-3771cbe2cb84 14 Jun 2021 M1 U1 Apache-2.0 Yes Details →
v0.30.1-0.20210611163523-fc1df7e7e792 11 Jun 2021 M1 U1 Apache-2.0 Yes Details →
v0.30.1-0.20210608150423-ae637b5b2f30 08 Jun 2021 M1 U1 Apache-2.0 Yes Details →
v0.29.1-0.20210525201142-ab2ec265aa3c 25 May 2021 M1 U1 Apache-2.0 Yes Details →
v0.30.0 25 May 2021 M1 U1 Apache-2.0 Yes Details →
v0.29.0 24 May 2021 M1 U1 Apache-2.0 Yes Details →
v0.27.1-0.20210507160054-4ac6ea9e978f 07 May 2021 M1 U1 Apache-2.0 Yes Details →
v0.28.0 07 May 2021 M1 U1 Apache-2.0 Yes Details →
v0.27.1-0.20210429105654-14e67042e694 29 Apr 2021 M1 U1 Apache-2.0 Yes Details →
v0.27.1-0.20210428151049-a1a4cfd5d8c3 28 Apr 2021 M1 U1 Apache-2.0 Yes Details →
v0.27.1-0.20210427151608-98ebcc41e4ab 27 Apr 2021 M1 U1 Apache-2.0 Yes Details →
v0.27.1-0.20210426234901-4f737338e586 26 Apr 2021 M1 U1 Apache-2.0 Yes Details →
v0.26.1-0.20210423154503-218845e89c9d 23 Apr 2021 M1 U1 Apache-2.0 Yes Details →
v0.27.0 23 Apr 2021 M1 U1 Apache-2.0 Yes Details →
v0.26.1-0.20210423135653-a95a77655897 23 Apr 2021 M1 U1 Apache-2.0 Yes Details →
v0.26.1-0.20210422222544-3a5f3e740279 22 Apr 2021 M1 U1 Apache-2.0 Yes Details →
v0.26.1-0.20210420010008-e9c57c8f3fbd 20 Apr 2021 M1 U1 Apache-2.0 Yes Details →
v0.26.1-0.20210417213855-5babb6690260 17 Apr 2021 M1 U1 — Yes Details →
v0.26.1-0.20210414205754-36dbf20153e8 14 Apr 2021 M1 U1 — Yes Details →
v0.26.1-0.20210414145054-be5751676a02 14 Apr 2021 M1 U1 — Yes Details →
v0.26.1-0.20210413140023-d46829fbae7a 13 Apr 2021 M1 U1 — Yes Details →
v0.26.0 09 Apr 2021 M1 U1 — Yes Details →
v0.25.1-0.20210408225518-96fba19e8aa6 08 Apr 2021 M1 U1 — Yes Details →
v0.25.1-0.20210405233604-262e50e1db77 05 Apr 2021 M1 U1 — Yes Details →
v0.25.1-0.20210331202350-fd61f4259d58 31 Mar 2021 M1 U1 — Yes Details →
v0.25.1-0.20210331202240-813b587972ba 31 Mar 2021 M1 U1 — Yes Details →
v0.25.1-0.20210330224528-101d74531853 30 Mar 2021 M1 U1 — Yes Details →
v0.25.0 29 Mar 2021 M1 U1 — Yes Details →
v0.24.1-0.20210325152636-b3a500457414 25 Mar 2021 M1 U1 — Yes Details →
v0.24.1-0.20210325150829-f98fc3db6d74 25 Mar 2021 M1 U1 — Yes Details →
v0.24.1-0.20210325145340-1f9b79e9d9e3 25 Mar 2021 M1 U1 — Yes Details →
v0.24.1-0.20210325000327-583b98fb1109 25 Mar 2021 M1 U1 — Yes Details →
v0.24.1-0.20210324220502-52390b7d3c94 24 Mar 2021 M1 U1 — Yes Details →
v0.24.1-0.20210324215511-b719c498b5c0 24 Mar 2021 M1 U1 — Yes Details →
v0.24.1-0.20210324154158-4ee9d33c0ac3 24 Mar 2021 M1 U1 — Yes Details →
v0.24.1-0.20210323235324-b7a277a4b108 23 Mar 2021 M1 U1 — Yes Details →
v0.24.1-0.20210323210051-90107b9aa3fc 23 Mar 2021 M1 U1 — Yes Details →

The newest 120 of 1,189 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2021 1
  • 2024 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/google/exposure-notifications-server

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
Import of Incorrectly Embargoed Keys Vulnerability in github.com/google/exposure-notifications-server N/A medium 0.18.3 21 May 2021
Early Publication Vulnerability in github.com/google/exposure-notifications-server N/A unrated 0.18.3 21 Aug 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/google/exposure-notifications-server

Is github.com/google/exposure-notifications-server safe to use?

Vulert records 2 vulnerabilities for github.com/google/exposure-notifications-server in Go: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/google/exposure-notifications-server's Vulert package health score?

Vulert scores github.com/google/exposure-notifications-server 75/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/google/exposure-notifications-server affected?

Yes. v1.17.0, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/google/exposure-notifications-server should I use?

v1.17.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/google/exposure-notifications-server have?

2 vulnerabilities are recorded for github.com/google/exposure-notifications-server in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/google/exposure-notifications-server vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/google/exposure-notifications-server in the last 12 months, and the oldest entry in this database dates to 21 May 2021. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/google/exposure-notifications-server are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/google/exposure-notifications-server for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/google/exposure-notifications-server version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.