VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/goreleaser/goreleaser: vulnerability history, versions and safety

github.com/goreleaser/goreleaser is a package in the Go ecosystem. Vulert records 4 vulnerabilities for it across 0 release, from Jan 2024 to Jun 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
4 vulnerabilities recorded M2 U2
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/goreleaser/goreleaser vulnerabilities

Vulert verdict on github.com/goreleaser/goreleaser v1.26.2 i

Updated on 23 Oct 2026

Good news: v1.26.2, the version you would install today, has no known vulnerabilities. Older releases do — the table below lists all 4.

Package health score 88/100
  • Security No known security issues
  • Maintenance Maintaining
  • Popularity Key ecosystem project
  • Community Active

What to do: Stay on v1.26.2 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.26.2 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v1.26.2 — unaffected i
  • Vulnerabilities on record 4 over 1 year · 0 in the last year i
  • Latest disclosure 04 Jun 2024 i
  • Highest CVSS 6.2 i
  • With no published fix 0 i
  • Stars 16,111 i
  • OpenSSF scorecard 9/10 i
  • Last release 29 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/goreleaser/goreleaser, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.26.3-0.20240525180408-b6b2df63127e 25 May 2024 none MIT — Details →
v1.26.3-0.20240525170949-4fa8df64136a 25 May 2024 none MIT — Details →
v1.26.3-0.20240524031507-3e40af256c46 24 May 2024 none MIT — Details →
v0.0.0-20240523121505-d7c23c168fa6 23 May 2024 none MIT — Details →
v1.26.2 23 May 2024 none MIT — Details →
v1.26.2-0.20240523121505-d7c23c168fa6 23 May 2024 none MIT — Details →
v1.26.2-0.20240522140048-f4cd8fc1561e 22 May 2024 none MIT — Details →
v1.26.2-0.20240521122438-1c66ce40d063 21 May 2024 none MIT — Details →
v1.26.2-0.20240520164607-cf2c47a5895d 20 May 2024 none MIT — Details →
v1.26.2-0.20240518224242-b3d646069937 18 May 2024 none MIT — Details →
v1.26.2-0.20240517114749-73a22e56dd75 17 May 2024 none MIT — Details →
v1.26.2-0.20240516130252-a82491afe446 16 May 2024 none MIT — Details →
v1.26.2-0.20240515141122-919b132e0de3 15 May 2024 none MIT — Details →
v1.26.1 15 May 2024 none MIT — Details →
v1.26.1-0.20240515131829-22f734e41f7a 15 May 2024 none MIT — Details →
v1.26.1-0.20240515131423-d557483388d7 15 May 2024 none MIT — Details →
v1.26.1-0.20240515014751-e466507637bc 15 May 2024 none MIT — Details →
v1.26.1-0.20240513130512-c09c86cb3962 13 May 2024 none MIT — Details →
v1.26.1-0.20240513124535-1793acd98b4c 13 May 2024 none MIT — Details →
v1.26.1-0.20240512173031-b58a766d8356 12 May 2024 none MIT — Details →
v1.26.1-0.20240512162256-c148106c56d8 12 May 2024 none MIT — Details →
v1.26.1-0.20240511172151-ba7e915cd8a2 11 May 2024 none MIT — Details →
v1.25.2-0.20240510021853-0481e63fb3d9 10 May 2024 none MIT — Details →
v1.26.0 10 May 2024 none MIT — Details →
v1.25.2-0.20240509182336-52dc2cb4e457 09 May 2024 none MIT — Details →
v1.25.2-0.20240509025024-9c1bc7caa43b 09 May 2024 none MIT — Details →
v1.25.2-0.20240508183759-7b78e195e2eb 08 May 2024 none MIT — Details →
v1.25.2-0.20240507121136-872b24442d21 07 May 2024 none MIT — Details →
v1.25.2-0.20240507115441-2ff365052a81 07 May 2024 none MIT — Details →
v1.25.2-0.20240506194217-f4c149e10bc0 06 May 2024 none MIT — Details →
v1.25.2-0.20240506032039-172d6d4b990c 06 May 2024 none MIT — Details →
v1.25.2-0.20240503132955-e538341179a2 03 May 2024 none MIT — Details →
v1.25.2-0.20240502234323-d9adeb35859a 02 May 2024 none MIT — Details →
v1.25.2-0.20240502190927-2a5c3229694c 02 May 2024 none MIT — Details →
v1.25.2-0.20240430124931-1493fd420996 30 Apr 2024 none MIT — Details →
v1.25.2-0.20240429114724-3433f1cc574e 29 Apr 2024 none MIT — Details →
v1.25.2-0.20240428233628-bee8665d9e6d 28 Apr 2024 none MIT — Details →
v1.25.2-0.20240428232053-bf31227b4eb9 28 Apr 2024 none MIT — Details →
v1.25.2-0.20240427145430-c052ccc6914e 27 Apr 2024 none MIT — Details →
v1.25.2-0.20240427144959-2cffcc58c5a7 27 Apr 2024 none MIT — Details →
v1.25.2-0.20240427033739-919f220e7149 27 Apr 2024 none MIT — Details →
v1.25.2-0.20240426160450-ca52f855fc34 26 Apr 2024 none MIT — Details →
v1.25.2-0.20240425131312-57938c58bed3 25 Apr 2024 none MIT — Details →
v1.25.2-0.20240425012548-1ec2e1628889 25 Apr 2024 none MIT — Details →
v1.25.2-0.20240424120820-39bf6668bc08 24 Apr 2024 none MIT — Details →
v1.25.2-0.20240424014918-2c93bd7c7f99 24 Apr 2024 none MIT — Details →
v1.25.2-0.20240423125757-8391ce56e124 23 Apr 2024 none MIT — Details →
v1.25.2-0.20240423025100-4015fa32bcf6 23 Apr 2024 none MIT — Details →
v1.25.2-0.20240422131648-9b8e82d915bd 22 Apr 2024 none MIT — Details →
v1.25.2-0.20240420012750-3cd2e07c6835 20 Apr 2024 none MIT — Details →
v1.25.2-0.20240418111353-5de5e61effc7 18 Apr 2024 none MIT — Details →
v1.25.2-0.20240417142901-d09c77cd73cc 17 Apr 2024 none MIT — Details →
v1.25.2-0.20240417015147-262c8dcbfea5 17 Apr 2024 none MIT — Details →
v1.25.2-0.20240415105745-56e0f7947388 15 Apr 2024 none MIT — Details →
v1.25.2-0.20240412140918-60a1cccf5748 12 Apr 2024 none MIT — Details →
v1.25.2-0.20240412140455-780a3a40d9bf 12 Apr 2024 none MIT — Details →
v1.25.2-0.20240410115551-c51b13a58b0f 10 Apr 2024 none MIT — Details →
v1.25.2-0.20240408131202-cad01855d85c 08 Apr 2024 none MIT — Details →
v1.25.2-0.20240408131134-dabe1f31bf51 08 Apr 2024 none MIT — Details →
v1.25.2-0.20240408024820-db84c67d9063 08 Apr 2024 none MIT — Details →
v1.25.2-0.20240408020507-9b3f514449c3 08 Apr 2024 none MIT — Details →
v1.25.2-0.20240404123529-826438b86584 04 Apr 2024 none MIT — Details →
v1.25.2-0.20240404022932-2b1fa09a07d5 04 Apr 2024 none MIT — Details →
v1.25.1 04 Apr 2024 none MIT — Details →
v1.25.1-0.20240404015135-6a7a9ba39957 04 Apr 2024 none MIT — Details →
v1.25.1-0.20240403171625-85cb59c1a023 03 Apr 2024 none MIT — Details →
v1.25.1-0.20240403165207-0ff94f13e4e5 03 Apr 2024 none MIT — Details →
v1.25.1-0.20240403023810-d972be970447 03 Apr 2024 none MIT — Details →
v1.25.0 02 Apr 2024 none MIT — Details →
v1.24.1-0.20240402112248-19160164cfb1 02 Apr 2024 none MIT — Details →
v1.24.1-0.20240401184613-2eca3c2c8fd9 01 Apr 2024 none MIT — Details →
v1.24.1-0.20240401140707-1af98af0b559 01 Apr 2024 none MIT — Details →
v1.24.1-0.20240401130306-c9ca63ece746 01 Apr 2024 none MIT — Details →
v1.24.1-0.20240331224838-5a8b6d41fb9b 31 Mar 2024 none MIT — Details →
v1.24.1-0.20240330002249-26c003a0760b 30 Mar 2024 none MIT — Details →
v1.24.1-0.20240329203634-79aa2fc3193c 29 Mar 2024 none MIT — Details →
v1.24.1-0.20240329192005-1db93473634b 29 Mar 2024 none MIT — Details →
v1.24.1-0.20240329132733-8cd325eb5a85 29 Mar 2024 none MIT — Details →
v1.24.1-0.20240327133405-46b53353fcf9 27 Mar 2024 none MIT — Details →
v1.24.1-0.20240327024141-2498ea702907 27 Mar 2024 none MIT — Details →
v1.24.1-0.20240325132614-10a4a2012262 25 Mar 2024 none MIT — Details →
v1.24.1-0.20240325125818-5256f063d04b 25 Mar 2024 none MIT — Details →
v1.24.1-0.20240320141941-1fdf2017c28f 20 Mar 2024 none MIT — Details →
v1.24.1-0.20240320115509-03f6f852610b 20 Mar 2024 none MIT — Details →
v1.24.1-0.20240320035351-dc0de4ce59f3 20 Mar 2024 none MIT — Details →
v1.24.1-0.20240320025308-08851dce6166 20 Mar 2024 none MIT — Details →
v1.24.1-0.20240320022542-6e0f42633904 20 Mar 2024 none MIT — Details →
v1.24.1-0.20240318165037-1007d766a528 18 Mar 2024 none MIT — Details →
v1.24.1-0.20240318122159-72a0d9d29ff9 18 Mar 2024 none MIT — Details →
v1.24.1-0.20240318003913-5073bd1a5fa1 18 Mar 2024 none MIT — Details →
v1.24.1-0.20240317182604-56c5a09f9a1e 17 Mar 2024 none MIT — Details →
v1.24.1-0.20240317174321-280e68431ad1 17 Mar 2024 none MIT — Details →
v1.24.1-0.20240316173817-9ee018547873 16 Mar 2024 none MIT — Details →
v1.24.1-0.20240316145051-c9068b4b3c6c 16 Mar 2024 none MIT — Details →
v1.24.1-0.20240316143601-e539e1256c65 16 Mar 2024 none MIT — Details →
v1.24.1-0.20240315232937-df3e799bec80 15 Mar 2024 none MIT — Details →
v1.24.1-0.20240315161657-b728f52f680b 15 Mar 2024 none MIT — Details →
v1.24.1-0.20240315014708-6f356ffcfaa2 15 Mar 2024 none MIT — Details →
v1.24.1-0.20240313175931-298ae3c61694 13 Mar 2024 none MIT — Details →
v1.24.1-0.20240312130220-6262ce5433b9 12 Mar 2024 none MIT — Details →
v1.24.1-0.20240312021848-e618905ca7ff 12 Mar 2024 none — — Details →
v1.24.1-0.20240311123125-4550c525d040 11 Mar 2024 none — — Details →
v1.24.1-0.20240308165802-85f213c9da5e 08 Mar 2024 none — — Details →
v1.24.1-0.20240308161830-eb36612c4615 08 Mar 2024 none — — Details →
v1.24.1-0.20240305121512-8c5a91c6897d 05 Mar 2024 none — — Details →
v1.24.1-0.20240304115606-3556408e2e1b 04 Mar 2024 none — — Details →
v1.24.1-0.20240303152741-b31a2acde96b 03 Mar 2024 none — — Details →
v1.24.1-0.20240303135317-1f39bddcb36f 03 Mar 2024 none — — Details →
v1.24.1-0.20240301143954-ec22d60b197f 01 Mar 2024 none — — Details →
v1.24.1-0.20240227125750-f0f88c2e4b80 27 Feb 2024 none — — Details →
v1.24.1-0.20240226202212-4d2bcfdc4694 26 Feb 2024 none — — Details →
v1.24.1-0.20240223185238-bd0c985398a8 23 Feb 2024 none — — Details →
v1.24.1-0.20240221013204-74c088548f13 21 Feb 2024 none — — Details →
v1.24.1-0.20240221012742-0f34ce6d9f60 21 Feb 2024 none — — Details →
v1.24.1-0.20240219234939-c54e530902cc 19 Feb 2024 none — — Details →
v1.24.1-0.20240219125047-ef90821ee75e 19 Feb 2024 none — — Details →
v1.24.1-0.20240219114337-fd24a00e47f6 19 Feb 2024 none — — Details →
v1.24.1-0.20240217183422-dab740dd8f4a 17 Feb 2024 none — — Details →
v1.24.1-0.20240213154118-554ca5f3e0ff 13 Feb 2024 none — — Details →
v1.24.1-0.20240213122017-1e8aac0f9d77 13 Feb 2024 none — — Details →

The newest 120 of 1,780 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 4

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 4 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/goreleaser/goreleaser

The 4 most severe of 4 vulnerabilities recorded for this package

Search all 4 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
goreleaser: Environment Leakage in Log Output 6.2 medium 1.26.1 15 May 2024
CVE-2024-23840: Information Disclosure in goreleaser 5.5 medium 1.24.0 30 Jan 2024
CVE-2024-23840: Information leak in github.com/goreleaser/goreleaser N/A unrated 1.24.0 13 Feb 2024
Vulnerability in github.com/goreleaser/goreleaser N/A unrated 1.26.1 04 Jun 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/goreleaser/goreleaser

Is github.com/goreleaser/goreleaser safe to use?

Vulert records 4 vulnerabilities for github.com/goreleaser/goreleaser in Go: 0 critical, 0 high, 2 medium and 0 low, plus 2 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/goreleaser/goreleaser's Vulert package health score?

Vulert scores github.com/goreleaser/goreleaser 88/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/goreleaser/goreleaser affected?

No. v1.26.2, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of github.com/goreleaser/goreleaser should I use?

v1.26.2 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/goreleaser/goreleaser have?

4 vulnerabilities are recorded for github.com/goreleaser/goreleaser in the Go ecosystem: 0 critical, 0 high, 2 medium and 0 low, plus 2 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/goreleaser/goreleaser vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/goreleaser/goreleaser in the last 12 months, and the oldest entry in this database dates to 30 Jan 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/goreleaser/goreleaser are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/goreleaser/goreleaser for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/goreleaser/goreleaser version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.