Vulnerability Database · Go · Package report

github.com/google/go-cmp: vulnerability history, versions and safety

github.com/google/go-cmp is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

Vulert verdict on github.com/google/go-cmp v0.7.0 i

Updated on 23 Oct 2026

Good news: v0.7.0, the version you would install today, has no known vulnerabilities.

Package health score 79/100
  • Security No known security issues
  • Maintenance Maintaining
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Stay on v0.7.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.7.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v0.7.0 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 4,682 i
  • OpenSSF scorecard 6/10 i
  • Last release 21 months ago i
  • Licence BSD-3-Clause i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/google/go-cmp, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20260618073321-b133f1f1932e 18 Jun 2026 none BSD-3-Clause — Details →
v0.7.1-0.20260618073321-b133f1f1932e 18 Jun 2026 none BSD-3-Clause — Details →
v0.0.0-20260310220054-34c9473539b8 10 Mar 2026 none BSD-3-Clause — Details →
v0.5.9-0.20260310220054-34c9473539b8 10 Mar 2026 none BSD-3-Clause — Details →
v0.7.1-0.20260310220054-34c9473539b8 10 Mar 2026 none BSD-3-Clause — Details →
v0.7.1-0.20260116205935-8b25e2f7a4d5 16 Jan 2026 none BSD-3-Clause — Details →
v0.5.8-0.20250114181544-9b12f366a942 14 Jan 2025 none BSD-3-Clause — Details →
v0.6.1-0.20250114181544-9b12f366a942 14 Jan 2025 none BSD-3-Clause — Details →
v0.7.0 14 Jan 2025 none BSD-3-Clause — Details →
v0.6.1-0.20241212212431-4dd3d63d6987 12 Dec 2024 none BSD-3-Clause — Details →
v0.6.1-0.20241023165416-391980c4b2e1 23 Oct 2024 none BSD-3-Clause — Details →
v0.0.0-20230831173240-c3ad8435e7be 31 Aug 2023 none BSD-3-Clause — Details →
v0.5.10-0.20230831173240-c3ad8435e7be 31 Aug 2023 none BSD-3-Clause — Details →
v0.6.0 31 Aug 2023 none BSD-3-Clause — Details →
v0.5.10-0.20230831062942-e250a55e9137 31 Aug 2023 none BSD-3-Clause — Details →
v0.5.10-0.20230605212449-8a3e8dd7458e 05 Jun 2023 none BSD-3-Clause — Details →
v0.5.10-0.20230605212050-94f0875d8a29 05 Jun 2023 none BSD-3-Clause — Details →
v0.5.10-0.20230605211230-8cea5de50d28 05 Jun 2023 none BSD-3-Clause — Details →
v0.5.10-0.20230329144223-2c07846e38ee 29 Mar 2023 none BSD-3-Clause — Details →
v0.0.0-20230222232936-3bb304a85447 22 Feb 2023 none BSD-3-Clause — Details →
v0.5.10-0.20230222232936-3bb304a85447 22 Feb 2023 none BSD-3-Clause — Details →
v0.5.10-0.20230222222849-571a56ba783f 22 Feb 2023 none BSD-3-Clause — Details →
v0.0.0-20220902224156-a97318bf6562 02 Sep 2022 none BSD-3-Clause — Details →
v0.5.9 02 Sep 2022 none BSD-3-Clause — Details →
v0.5.9-0.20220902224156-a97318bf6562 02 Sep 2022 none BSD-3-Clause — Details →
v0.5.9-0.20220831012527-377d28384c85 31 Aug 2022 none BSD-3-Clause — Details →
v0.5.9-0.20220830233927-6606d4d51e32 30 Aug 2022 none BSD-3-Clause — Details →
v0.5.9-0.20220830230602-f36a68d19a9b 30 Aug 2022 none BSD-3-Clause — Details →
v0.5.9-0.20220830225516-5dac6aa44b75 30 Aug 2022 none BSD-3-Clause — Details →
v0.0.0-20220713181007-14ad8a02f30b 13 Jul 2022 none BSD-3-Clause — Details →
v0.5.9-0.20220713181007-14ad8a02f30b 13 Jul 2022 none BSD-3-Clause — Details →
v0.5.9-0.20220606173127-a53d7e09b000 06 Jun 2022 none BSD-3-Clause — Details →
v0.5.8 26 Apr 2022 none BSD-3-Clause — Details →
v0.5.8-0.20220426204916-f144a35ed4ac 26 Apr 2022 none BSD-3-Clause — Details →
v0.5.8-0.20220426192426-63c2960be651 26 Apr 2022 none BSD-3-Clause — Details →
v0.5.8-0.20220425163219-71220fc3ca55 25 Apr 2022 none BSD-3-Clause — Details →
v0.5.8-0.20220425162647-4664e24d52be 25 Apr 2022 none BSD-3-Clause — Details →
v0.5.8-0.20220322140527-79433ace284e 22 Mar 2022 none BSD-3-Clause — Details →
v0.0.0-20220104175040-039e37cba1f3 04 Jan 2022 none BSD-3-Clause — Details →
v0.5.7 04 Jan 2022 none BSD-3-Clause — Details →
v0.5.7-0.20220104175040-039e37cba1f3 04 Jan 2022 none BSD-3-Clause — Details →
v0.5.7-0.20211207210118-3242228551a7 07 Dec 2021 none BSD-3-Clause — Details →
v0.5.7-0.20211207191008-f59cd61478ea 07 Dec 2021 none BSD-3-Clause — Details →
v0.0.0-20211012181502-6faefd0594fa 12 Oct 2021 none BSD-3-Clause — Details →
v0.5.7-0.20211012181502-6faefd0594fa 12 Oct 2021 none BSD-3-Clause — Details →
v0.5.7-0.20211012174609-f1773ad7bdb1 12 Oct 2021 none BSD-3-Clause — Details →
v0.0.0-20210916230029-9094ef9afacb 16 Sep 2021 none BSD-3-Clause — Details →
v0.5.7-0.20210916230029-9094ef9afacb 16 Sep 2021 none BSD-3-Clause — Details →
v0.5.7-0.20210916225550-3ee52c8a5607 16 Sep 2021 none BSD-3-Clause — Details →
v0.0.0-20210722231442-395a0ac54905 22 Jul 2021 none BSD-3-Clause — Details →
v0.5.7-0.20210722231442-395a0ac54905 22 Jul 2021 none BSD-3-Clause — Details →
v0.5.7-0.20210719171214-402949e8139b 19 Jul 2021 none BSD-3-Clause — Details →
v0.5.7-0.20210719003248-d5fcb3868642 19 Jul 2021 none BSD-3-Clause — Details →
v0.5.7-0.20210527174829-290a6a23966f 27 May 2021 none BSD-3-Clause — Details →
v0.5.7-0.20210527164501-248ccfffa4b8 27 May 2021 none BSD-3-Clause — Details →
v0.5.6 25 May 2021 none BSD-3-Clause — Details →
v0.5.6-0.20210525012332-9181d1e7c976 25 May 2021 none BSD-3-Clause — Details →
v0.5.6-0.20210525003336-c5c3378d8544 25 May 2021 none BSD-3-Clause — Details →
v0.0.0-20210412164706-1ee4af8b89b1 12 Apr 2021 none BSD-3-Clause — Details →
v0.5.6-0.20210412164706-1ee4af8b89b1 12 Apr 2021 none BSD-3-Clause — Details →
v0.5.5 03 Mar 2021 none BSD-3-Clause — Details →
v0.5.5-0.20210303204837-8fa37b4dd109 03 Mar 2021 none BSD-3-Clause — Details →
v0.5.5-0.20210303174831-df549bd72336 03 Mar 2021 none BSD-3-Clause — Details →
v0.5.5-0.20210303174145-dc6435e42690 03 Mar 2021 none BSD-3-Clause — Details →
v0.0.0-20210220220013-e9947a2e1dee 20 Feb 2021 none BSD-3-Clause — Details →
v0.5.5-0.20210220220013-e9947a2e1dee 20 Feb 2021 none BSD-3-Clause — Details →
v0.5.5-0.20210205000849-3a98a11b2c6d 05 Feb 2021 none BSD-3-Clause — Details →
v0.0.0-20201124182602-ec71d6d79053 24 Nov 2020 none BSD-3-Clause — Details →
v0.5.4 24 Nov 2020 none BSD-3-Clause — Details →
v0.5.4-0.20201124175322-449e17c6c9da 24 Nov 2020 none BSD-3-Clause — Details →
v0.5.4-0.20201123185154-ade6b74536ea 23 Nov 2020 none BSD-3-Clause — Details →
v0.5.3 12 Nov 2020 none BSD-3-Clause — Details →
v0.0.0-20201020212313-ab46b8bd0abd 20 Oct 2020 none BSD-3-Clause — Details →
v0.5.3-0.20201020212313-ab46b8bd0abd 20 Oct 2020 none BSD-3-Clause — Details →
v0.5.3-0.20201004081617-566225a2554c 04 Oct 2020 none BSD-3-Clause — Details →
v0.5.3-0.20200923203054-d713870ac17f 23 Sep 2020 none BSD-3-Clause — Details →
v0.0.0-20200818193711-d2fcc899bdc2 18 Aug 2020 none BSD-3-Clause — Details →
v0.5.2 18 Aug 2020 none BSD-3-Clause — Details →
v0.5.2-0.20200818193711-d2fcc899bdc2 18 Aug 2020 none BSD-3-Clause — Details →
v0.5.2-0.20200812193049-db9de4321f4e 12 Aug 2020 none BSD-3-Clause — Details →
v0.5.2-0.20200729152727-036ffc7f24c0 29 Jul 2020 none BSD-3-Clause — Details →
v0.0.0-20200721191714-9680bfaf2874 21 Jul 2020 none BSD-3-Clause — Details →
v0.5.1 21 Jul 2020 none BSD-3-Clause — Details →
v0.0.0-20200714173529-1536a0c407e0 14 Jul 2020 none BSD-3-Clause — Details →
v0.5.1-0.20200714173529-1536a0c407e0 14 Jul 2020 none BSD-3-Clause — Details →
v0.5.1-0.20200622165317-d669b046d122 22 Jun 2020 none BSD-3-Clause — Details →
v0.0.0-20200618002547-77ae86f624cb 18 Jun 2020 none BSD-3-Clause — Details →
v0.5.0 18 Jun 2020 none BSD-3-Clause — Details →
v0.4.2-0.20200617214150-c49bfce0ac91 17 Jun 2020 none BSD-3-Clause — Details →
v0.4.2-0.20200617212343-12277310d373 17 Jun 2020 none BSD-3-Clause — Details →
v0.4.2-0.20200614100538-6a70c4cbe901 14 Jun 2020 none BSD-3-Clause — Details →
v0.4.2-0.20200612222935-44914b370698 12 Jun 2020 none BSD-3-Clause — Details →
v0.4.2-0.20200612012852-f1780cfdde93 12 Jun 2020 none BSD-3-Clause — Details →
v0.4.2-0.20200610235130-0d296f9f5349 10 Jun 2020 none BSD-3-Clause — Details →
v0.4.2-0.20200610234426-7c9a834557ca 10 Jun 2020 none BSD-3-Clause — Details →
v0.4.2-0.20200610191246-0cd6169de14f 10 Jun 2020 none BSD-3-Clause — Details →
v0.4.2-0.20200610181133-a171aa74446a 10 Jun 2020 none BSD-3-Clause — Details →
v0.4.2-0.20200610180811-88849e8bc9a6 10 Jun 2020 none BSD-3-Clause — Details →
v0.4.2-0.20200610180030-9b300311a803 10 Jun 2020 none BSD-3-Clause — Details →
v0.0.0-20200610173617-367e530b4ed7 10 Jun 2020 none BSD-3-Clause — Details →
v0.4.2-0.20200610173617-367e530b4ed7 10 Jun 2020 none — — Details →
v0.4.2-0.20200609072101-23a2b5646fe0 09 Jun 2020 none — — Details →
v0.4.2-0.20200608233731-11c4583a2803 08 Jun 2020 none — — Details →
v0.0.0-20200526202920-4a83f5627756 26 May 2020 none — — Details →
v0.4.2-0.20200526202920-4a83f5627756 26 May 2020 none — — Details →
v0.4.2-0.20200520202230-d08c604e6f3e 20 May 2020 none — — Details →
v0.0.0-20200517041153-aa7c82a3f209 17 May 2020 none — — Details →
v0.4.2-0.20200517041153-aa7c82a3f209 17 May 2020 none — — Details →
v0.4.1 15 May 2020 none — — Details →
v0.4.1-0.20200515043944-7e5cb83929c5 15 May 2020 none — — Details →
v0.4.1-0.20200513220807-0c08307de36d 13 May 2020 none — — Details →
v0.4.1-0.20200513190048-049b73f65ccf 13 May 2020 none — — Details →
v0.0.0-20200329012457-cb8c7f84fcfb 29 Mar 2020 none — — Details →
v0.4.1-0.20200329012457-cb8c7f84fcfb 29 Mar 2020 none — — Details →
v0.0.0-20200227185346-f6dc95b586bc 27 Feb 2020 none — — Details →
v0.4.1-0.20200227185346-f6dc95b586bc 27 Feb 2020 none — — Details →
v0.4.1-0.20200227183702-6fdcbe1f1334 27 Feb 2020 none — — Details →
v0.4.1-0.20200227183233-5915021f6d96 27 Feb 2020 none — — Details →
v0.0.0-20191216211814-5a6f75716e12 16 Dec 2019 none — — Details →
v0.3.2-0.20191216211814-5a6f75716e12 16 Dec 2019 none — — Details →

The newest 120 of 236 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/google/go-cmp

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/google/go-cmp

Is github.com/google/go-cmp safe to use?

Vulert has no vulnerabilities on record for github.com/google/go-cmp in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/google/go-cmp's Vulert package health score?

Vulert scores github.com/google/go-cmp 79/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/google/go-cmp affected?

No. v0.7.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of github.com/google/go-cmp should I use?

v0.7.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/google/go-cmp have?

0 vulnerabilities are recorded for github.com/google/go-cmp in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/google/go-cmp vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/google/go-cmp in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/google/go-cmp are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/google/go-cmp for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/google/go-cmp version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.