Vulnerability Database · Go · Package report
github.com/google/go-cmp: vulnerability history, versions and safety
github.com/google/go-cmp is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/google/go-cmp v0.7.0 i
Updated on 23 Oct 2026
Good news: v0.7.0, the version you would install today, has no known vulnerabilities.
- Security No known security issues
- Maintenance Maintaining
- Popularity Key ecosystem project
- Community Moderate
What to do: Stay on v0.7.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.7.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v0.7.0 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 4,682 i
- OpenSSF scorecard 6/10 i
- Last release 21 months ago i
- Licence BSD-3-Clause i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/google/go-cmp, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v0.0.0-20260618073321-b133f1f1932e 18 Jun 2026
- v0.7.1-0.20260618073321-b133f1f1932e 18 Jun 2026
- v0.0.0-20260310220054-34c9473539b8 10 Mar 2026
- v0.5.9-0.20260310220054-34c9473539b8 10 Mar 2026
- v0.7.1-0.20260310220054-34c9473539b8 10 Mar 2026
- v0.7.1-0.20260116205935-8b25e2f7a4d5 16 Jan 2026
- v0.5.8-0.20250114181544-9b12f366a942 14 Jan 2025
- v0.6.1-0.20250114181544-9b12f366a942 14 Jan 2025
- v0.7.0 14 Jan 2025
- v0.6.1-0.20241212212431-4dd3d63d6987 12 Dec 2024
- v0.6.1-0.20241023165416-391980c4b2e1 23 Oct 2024
- v0.0.0-20230831173240-c3ad8435e7be 31 Aug 2023
- v0.5.10-0.20230831173240-c3ad8435e7be 31 Aug 2023
- v0.6.0 31 Aug 2023
- v0.5.10-0.20230831062942-e250a55e9137 31 Aug 2023
- v0.5.10-0.20230605212449-8a3e8dd7458e 05 Jun 2023
- v0.5.10-0.20230605212050-94f0875d8a29 05 Jun 2023
- v0.5.10-0.20230605211230-8cea5de50d28 05 Jun 2023
- v0.5.10-0.20230329144223-2c07846e38ee 29 Mar 2023
- v0.0.0-20230222232936-3bb304a85447 22 Feb 2023
- v0.5.10-0.20230222232936-3bb304a85447 22 Feb 2023
- v0.5.10-0.20230222222849-571a56ba783f 22 Feb 2023
- v0.0.0-20220902224156-a97318bf6562 02 Sep 2022
- v0.5.9 02 Sep 2022
- v0.5.9-0.20220902224156-a97318bf6562 02 Sep 2022
- v0.5.9-0.20220831012527-377d28384c85 31 Aug 2022
- v0.5.9-0.20220830233927-6606d4d51e32 30 Aug 2022
- v0.5.9-0.20220830230602-f36a68d19a9b 30 Aug 2022
- v0.5.9-0.20220830225516-5dac6aa44b75 30 Aug 2022
- v0.0.0-20220713181007-14ad8a02f30b 13 Jul 2022
- v0.5.9-0.20220713181007-14ad8a02f30b 13 Jul 2022
- v0.5.9-0.20220606173127-a53d7e09b000 06 Jun 2022
- v0.5.8 26 Apr 2022
- v0.5.8-0.20220426204916-f144a35ed4ac 26 Apr 2022
- v0.5.8-0.20220426192426-63c2960be651 26 Apr 2022
- v0.5.8-0.20220425163219-71220fc3ca55 25 Apr 2022
- v0.5.8-0.20220425162647-4664e24d52be 25 Apr 2022
- v0.5.8-0.20220322140527-79433ace284e 22 Mar 2022
- v0.0.0-20220104175040-039e37cba1f3 04 Jan 2022
- v0.5.7 04 Jan 2022
- v0.5.7-0.20220104175040-039e37cba1f3 04 Jan 2022
- v0.5.7-0.20211207210118-3242228551a7 07 Dec 2021
- v0.5.7-0.20211207191008-f59cd61478ea 07 Dec 2021
- v0.0.0-20211012181502-6faefd0594fa 12 Oct 2021
- v0.5.7-0.20211012181502-6faefd0594fa 12 Oct 2021
- v0.5.7-0.20211012174609-f1773ad7bdb1 12 Oct 2021
- v0.0.0-20210916230029-9094ef9afacb 16 Sep 2021
- v0.5.7-0.20210916230029-9094ef9afacb 16 Sep 2021
- v0.5.7-0.20210916225550-3ee52c8a5607 16 Sep 2021
- v0.0.0-20210722231442-395a0ac54905 22 Jul 2021
- v0.5.7-0.20210722231442-395a0ac54905 22 Jul 2021
- v0.5.7-0.20210719171214-402949e8139b 19 Jul 2021
- v0.5.7-0.20210719003248-d5fcb3868642 19 Jul 2021
- v0.5.7-0.20210527174829-290a6a23966f 27 May 2021
- v0.5.7-0.20210527164501-248ccfffa4b8 27 May 2021
- v0.5.6 25 May 2021
- v0.5.6-0.20210525012332-9181d1e7c976 25 May 2021
- v0.5.6-0.20210525003336-c5c3378d8544 25 May 2021
- v0.0.0-20210412164706-1ee4af8b89b1 12 Apr 2021
- v0.5.6-0.20210412164706-1ee4af8b89b1 12 Apr 2021
- v0.5.5 03 Mar 2021
- v0.5.5-0.20210303204837-8fa37b4dd109 03 Mar 2021
- v0.5.5-0.20210303174831-df549bd72336 03 Mar 2021
- v0.5.5-0.20210303174145-dc6435e42690 03 Mar 2021
- v0.0.0-20210220220013-e9947a2e1dee 20 Feb 2021
- v0.5.5-0.20210220220013-e9947a2e1dee 20 Feb 2021
- v0.5.5-0.20210205000849-3a98a11b2c6d 05 Feb 2021
- v0.0.0-20201124182602-ec71d6d79053 24 Nov 2020
- v0.5.4 24 Nov 2020
- v0.5.4-0.20201124175322-449e17c6c9da 24 Nov 2020
- v0.5.4-0.20201123185154-ade6b74536ea 23 Nov 2020
- v0.5.3 12 Nov 2020
- v0.0.0-20201020212313-ab46b8bd0abd 20 Oct 2020
- v0.5.3-0.20201020212313-ab46b8bd0abd 20 Oct 2020
- v0.5.3-0.20201004081617-566225a2554c 04 Oct 2020
- v0.5.3-0.20200923203054-d713870ac17f 23 Sep 2020
- v0.0.0-20200818193711-d2fcc899bdc2 18 Aug 2020
- v0.5.2 18 Aug 2020
- v0.5.2-0.20200818193711-d2fcc899bdc2 18 Aug 2020
- v0.5.2-0.20200812193049-db9de4321f4e 12 Aug 2020
- v0.5.2-0.20200729152727-036ffc7f24c0 29 Jul 2020
- v0.0.0-20200721191714-9680bfaf2874 21 Jul 2020
- v0.5.1 21 Jul 2020
- v0.0.0-20200714173529-1536a0c407e0 14 Jul 2020
- v0.5.1-0.20200714173529-1536a0c407e0 14 Jul 2020
- v0.5.1-0.20200622165317-d669b046d122 22 Jun 2020
- v0.0.0-20200618002547-77ae86f624cb 18 Jun 2020
- v0.5.0 18 Jun 2020
- v0.4.2-0.20200617214150-c49bfce0ac91 17 Jun 2020
- v0.4.2-0.20200617212343-12277310d373 17 Jun 2020
- v0.4.2-0.20200614100538-6a70c4cbe901 14 Jun 2020
- v0.4.2-0.20200612222935-44914b370698 12 Jun 2020
- v0.4.2-0.20200612012852-f1780cfdde93 12 Jun 2020
- v0.4.2-0.20200610235130-0d296f9f5349 10 Jun 2020
- v0.4.2-0.20200610234426-7c9a834557ca 10 Jun 2020
- v0.4.2-0.20200610191246-0cd6169de14f 10 Jun 2020
- v0.4.2-0.20200610181133-a171aa74446a 10 Jun 2020
- v0.4.2-0.20200610180811-88849e8bc9a6 10 Jun 2020
- v0.4.2-0.20200610180030-9b300311a803 10 Jun 2020
- v0.0.0-20200610173617-367e530b4ed7 10 Jun 2020
- v0.4.2-0.20200610173617-367e530b4ed7 10 Jun 2020
- v0.4.2-0.20200609072101-23a2b5646fe0 09 Jun 2020
- v0.4.2-0.20200608233731-11c4583a2803 08 Jun 2020
- v0.0.0-20200526202920-4a83f5627756 26 May 2020
- v0.4.2-0.20200526202920-4a83f5627756 26 May 2020
- v0.4.2-0.20200520202230-d08c604e6f3e 20 May 2020
- v0.0.0-20200517041153-aa7c82a3f209 17 May 2020
- v0.4.2-0.20200517041153-aa7c82a3f209 17 May 2020
- v0.4.1 15 May 2020
- v0.4.1-0.20200515043944-7e5cb83929c5 15 May 2020
- v0.4.1-0.20200513220807-0c08307de36d 13 May 2020
- v0.4.1-0.20200513190048-049b73f65ccf 13 May 2020
- v0.0.0-20200329012457-cb8c7f84fcfb 29 Mar 2020
- v0.4.1-0.20200329012457-cb8c7f84fcfb 29 Mar 2020
- v0.0.0-20200227185346-f6dc95b586bc 27 Feb 2020
- v0.4.1-0.20200227185346-f6dc95b586bc 27 Feb 2020
- v0.4.1-0.20200227183702-6fdcbe1f1334 27 Feb 2020
- v0.4.1-0.20200227183233-5915021f6d96 27 Feb 2020
- v0.0.0-20191216211814-5a6f75716e12 16 Dec 2019
- v0.3.2-0.20191216211814-5a6f75716e12 16 Dec 2019
The newest 120 of 236 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/google/go-cmp
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/google/go-cmp
Is github.com/google/go-cmp safe to use?
Vulert has no vulnerabilities on record for github.com/google/go-cmp in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/google/go-cmp's Vulert package health score?
Vulert scores github.com/google/go-cmp 79/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/google/go-cmp affected?
No. v0.7.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of github.com/google/go-cmp should I use?
v0.7.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does github.com/google/go-cmp have?
0 vulnerabilities are recorded for github.com/google/go-cmp in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/google/go-cmp vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/google/go-cmp in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/google/go-cmp are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/google/go-cmp for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/google/go-cmp version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.