VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/google/go-containerregistry/pkg/authn/k8schain: vulnerability history, versions and safety

github.com/google/go-containerregistry/pkg/authn/k8schain is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/google/go-containerregistry/pkg/authn/k8schain vulnerabilities

Vulert verdict on github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20261013193525-92aac6186bc4 i

Updated on 23 Oct 2026

Good news: v0.0.0-20261013193525-92aac6186bc4, the version you would install today, has no known vulnerabilities.

Package health score 93/100
  • Security No known security issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Active

What to do: Stay on v0.0.0-20261013193525-92aac6186bc4 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.0.0-20261013193525-92aac6186bc4 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v0.0.0-20261013193525-92aac6186bc4 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 4,089 i
  • OpenSSF scorecard 8/10 i
  • Last release this month i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/google/go-containerregistry/pkg/authn/k8schain, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20261021023803-a3b91a527c2a 21 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261013193525-92aac6186bc4 13 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261007205041-aa08c1ff04c2 07 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261006190915-017b00698403 06 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20261005233314-9429ab88702a 05 Oct 2026 none Apache-2.0 — Details →
v0.0.0-20260911193048-0c8bedb78437 11 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260909212242-5d7bf6b5c1ff 09 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260909202636-ff550e50215e 09 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260904000721-8a72a424fdec 04 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260903222812-5765c35e1828 03 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260903191713-969402f936ab 03 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260902190643-25c682edd9ae 02 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260902181005-79af990692dd 02 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260901230530-e033b9cb1f1b 01 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260901210625-8bd7902fc85c 01 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260901193541-44f7ea307e04 01 Sep 2026 none Apache-2.0 — Details →
v0.0.0-20260831202016-7673ae25baf2 31 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260831194711-ac978aabebff 31 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260831192213-ebc6352fb074 31 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260828232600-2570979f0952 28 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260821201612-3f4ff3ca60f5 21 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260820212917-c6b5acd7d45e 20 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260819205953-8f4a85dbcf7a 19 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260819172912-548156007ca9 19 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260819004450-5b5c27267a68 19 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260818223538-66dd45462b47 18 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260818222130-3f47f91d59a3 18 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260818194533-4cb3583322c3 18 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260811190025-d3bca10fb174 11 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260805202503-7b32099eb119 05 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260805200110-2a4447d66989 05 Aug 2026 none Apache-2.0 — Details →
v0.0.0-20260731170845-2ea098f4b134 31 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260731000824-ec2e58687793 31 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260730234525-ab819b62e85e 30 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260730230021-eed9a206c190 30 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260730203355-8a97709675a1 30 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260730202032-d04bf7d85192 30 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260730190619-4d13d5326e29 30 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260729234215-af2603f63fea 29 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260729163457-fb196956b185 29 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260729161711-0c9d9110e203 29 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260729013301-b757a3cd02a7 29 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260728211933-06774c0169e8 28 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260725002307-afc8f33a809d 25 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260725000406-0f89719850d8 25 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260724235326-9cd572fb05cc 24 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260724224012-84412cd0c875 24 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260724185937-76d3597ddbb3 24 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260723230821-bcbbf2aa72fa 23 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260723212641-0bd62ccca652 23 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260723202708-8646f41647a6 23 Jul 2026 none Apache-2.0 — Details →
v0.0.0-20260624172245-e8b2b9e51df6 24 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260617220028-c68d89978269 17 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260617203919-da61d865f872 17 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260617193246-09fe1e55280a 17 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260617190050-97a8a17e2725 17 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260617164309-e9634975f4ac 17 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260612174616-02649eab0d52 12 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260612173422-7204b401d376 12 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260611222238-4cfaa93eb444 11 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260604213829-6849394e8a65 04 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260604212323-ebd9e4a92792 04 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260602205845-4b7672c7705a 02 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260602200943-e4a78951c3eb 02 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260602185054-06ee04923544 02 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260602184325-7f937fe593c4 02 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260602182410-e8f7b82ff062 02 Jun 2026 none Apache-2.0 — Details →
v0.0.0-20260527222710-9db1ad671444 27 May 2026 none Apache-2.0 — Details →
v0.0.0-20260527215547-87577de11347 27 May 2026 none Apache-2.0 — Details →
v0.0.0-20260521193141-31df54cfbc41 21 May 2026 none Apache-2.0 — Details →
v0.0.0-20260521190245-c0f5e89ab313 21 May 2026 none Apache-2.0 — Details →
v0.0.0-20260521185710-8897c5117ea8 21 May 2026 none Apache-2.0 — Details →
v0.0.0-20260520013816-d807d512681c 20 May 2026 none Apache-2.0 — Details →
v0.0.0-20260519171711-a3a74df337c5 19 May 2026 none Apache-2.0 — Details →
v0.0.0-20260518191058-53f7e39e15bf 18 May 2026 none Apache-2.0 — Details →
v0.0.0-20260518185125-bf87c3bfe4cc 18 May 2026 none Apache-2.0 — Details →
v0.0.0-20260518174128-c55facddfbd7 18 May 2026 none Apache-2.0 — Details →
v0.0.0-20260515224305-68a569e4a0eb 15 May 2026 none Apache-2.0 — Details →
v0.0.0-20260515214736-35b354b43687 15 May 2026 none Apache-2.0 — Details →
v0.0.0-20260515213456-e5983f2a67ec 15 May 2026 none Apache-2.0 — Details →
v0.0.0-20260514182951-6dad820da7de 14 May 2026 none Apache-2.0 — Details →
v0.0.0-20260514172530-78bdf1b7e210 14 May 2026 none Apache-2.0 — Details →
v0.0.0-20260513214732-c29d91cdc394 13 May 2026 none Apache-2.0 — Details →
v0.0.0-20260513191137-a70d75a6915e 13 May 2026 none Apache-2.0 — Details →
v0.0.0-20260512234956-a4da0edd9906 12 May 2026 none Apache-2.0 — Details →
v0.0.0-20260512230405-341d8be926ca 12 May 2026 none Apache-2.0 — Details →
v0.0.0-20260507135940-fac4ed9c8f0e 07 May 2026 none Apache-2.0 — Details →
v0.0.0-20260505214906-7ab219a508a2 05 May 2026 none Apache-2.0 — Details →
v0.0.0-20260430212304-f1eecabea0ff 30 Apr 2026 none Apache-2.0 — Details →
v0.0.0-20260429191119-2d86301800e9 29 Apr 2026 none Apache-2.0 — Details →
v0.0.0-20260428230914-611d67577a05 28 Apr 2026 none Apache-2.0 — Details →
v0.0.0-20260428225712-7b441cf1c6cd 28 Apr 2026 none Apache-2.0 — Details →
v0.0.0-20260428225113-3fcf6f4a7610 28 Apr 2026 none Apache-2.0 — Details →
v0.0.0-20260428190948-38d6e4087c96 28 Apr 2026 none Apache-2.0 — Details →
v0.0.0-20260421225946-d4f10504a3c9 21 Apr 2026 none Apache-2.0 — Details →
v0.0.0-20260421223412-3502eacc53e4 21 Apr 2026 none Apache-2.0 — Details →
v0.0.0-20260421220740-85c95145bb75 21 Apr 2026 none Apache-2.0 — Details →
v0.0.0-20260420192954-ccc3b92d82df 20 Apr 2026 none Apache-2.0 — Details →
v0.0.0-20260420192334-d8112ef04b00 20 Apr 2026 none Apache-2.0 — Details →
v0.0.0-20260416183851-f80cb9a75083 16 Apr 2026 none Apache-2.0 — Details →
v0.0.0-20260416181945-1bdf519a1d4d 16 Apr 2026 none — — Details →
v0.0.0-20260414223304-7a662782a11f 14 Apr 2026 none — — Details →
v0.0.0-20260411021910-5b80281da727 11 Apr 2026 none — — Details →
v0.0.0-20260411015439-b99bca24a8df 11 Apr 2026 none — — Details →
v0.0.0-20260411014305-f8be1d442e6f 11 Apr 2026 none — — Details →
v0.0.0-20260411012421-87ad88b4a000 11 Apr 2026 none — — Details →
v0.0.0-20260406183343-e8813dd0a00e 06 Apr 2026 none — — Details →
v0.0.0-20260401175751-e90447d31923 01 Apr 2026 none — — Details →
v0.0.0-20260331234945-0d0368c2a5fa 31 Mar 2026 none — — Details →
v0.0.0-20260331233459-19a36cd8c44d 31 Mar 2026 none — — Details →
v0.0.0-20260330232403-c612a9b20a4c 30 Mar 2026 none — — Details →
v0.0.0-20260330163325-c99e7cf68b97 30 Mar 2026 none — — Details →
v0.0.0-20260327163901-0794660d7203 27 Mar 2026 none — — Details →
v0.0.0-20260326164908-4cb93aef099e 26 Mar 2026 none — — Details →
v0.0.0-20260324171841-bf0f7103d474 24 Mar 2026 none — — Details →
v0.0.0-20260317232201-3888fb8f8738 17 Mar 2026 none — — Details →
v0.0.0-20260317204347-f4396242bd42 17 Mar 2026 none — — Details →
v0.0.0-20260317202458-400c263d8e8d 17 Mar 2026 none — — Details →
v0.0.0-20260316232238-47eedc9de49f 16 Mar 2026 none — — Details →
v0.0.0-20260316225823-be0a84599955 16 Mar 2026 none — — Details →

The newest 120 of 600 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/google/go-containerregistry/pkg/authn/k8schain

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/google/go-containerregistry/pkg/authn/k8schain

Is github.com/google/go-containerregistry/pkg/authn/k8schain safe to use?

Vulert has no vulnerabilities on record for github.com/google/go-containerregistry/pkg/authn/k8schain in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/google/go-containerregistry/pkg/authn/k8schain's Vulert package health score?

Vulert scores github.com/google/go-containerregistry/pkg/authn/k8schain 93/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/google/go-containerregistry/pkg/authn/k8schain affected?

No. v0.0.0-20261013193525-92aac6186bc4, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

How many vulnerabilities does github.com/google/go-containerregistry/pkg/authn/k8schain have?

0 vulnerabilities are recorded for github.com/google/go-containerregistry/pkg/authn/k8schain in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/google/go-containerregistry/pkg/authn/k8schain vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/google/go-containerregistry/pkg/authn/k8schain in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/google/go-containerregistry/pkg/authn/k8schain are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/google/go-containerregistry/pkg/authn/k8schain for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/google/go-containerregistry/pkg/authn/k8schain version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.