VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/gorilla/schema: vulnerability history, versions and safety

github.com/gorilla/schema is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, first recorded in Jul 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded H1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/gorilla/schema vulnerabilities

Vulert verdict on github.com/gorilla/schema v1.4.1 i

Updated on 23 Oct 2026

Action needed: v1.4.1 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 68/100
  • Security Minor issues
  • Maintenance Maintaining
  • Popularity Widely used
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.4.1 — affected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 02 Jul 2024 i
  • Highest CVSS 7.5 i
  • With no published fix 0 i
  • Stars 1,516 i
  • OpenSSF scorecard 3/10 i
  • Last release 27 months ago i
  • Licence BSD-3-Clause i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/gorilla/schema, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.4.1 29 Jun 2024 H1 U1 BSD-3-Clause Yes Details →
v1.4.1-0.20240629203406-cd59f2f12cbd 29 Jun 2024 H1 U1 BSD-3-Clause Yes Details →
v1.3.1-0.20240603042940-180f71e62507 03 Jun 2024 H1 U1 BSD-3-Clause Yes Details →
v1.4.0 03 Jun 2024 H1 U1 BSD-3-Clause Yes Details →
v1.3.1-0.20240504161333-4548527ece86 04 May 2024 H1 U1 BSD-3-Clause Yes Details →
v1.3.1-0.20240504161333-50924ff92dda 04 May 2024 H1 U1 BSD-3-Clause Yes Details →
v1.3.1-0.20240504161333-74876512deb8 04 May 2024 H1 U1 BSD-3-Clause Yes Details →
v1.3.1-0.20240504161333-7d1c58e94f09 04 May 2024 H1 U1 BSD-3-Clause Yes Details →
v1.3.1-0.20240504161333-993e5b1271c4 04 May 2024 H1 U1 BSD-3-Clause Yes Details →
v1.3.1-0.20240504161333-a377fd6ca777 04 May 2024 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20240306040443-1ab5d826e362 06 Mar 2024 H1 U1 BSD-3-Clause Yes Details →
v1.2.2-0.20240306040443-1ab5d826e362 06 Mar 2024 H1 U1 BSD-3-Clause Yes Details →
v1.3.0 06 Mar 2024 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20240210021605-eda9c333a9b5 10 Feb 2024 H1 U1 BSD-3-Clause Yes Details →
v1.2.2-0.20240210021605-eda9c333a9b5 10 Feb 2024 H1 U1 BSD-3-Clause Yes Details →
v1.2.2-0.20240118035850-4890efcd8442 18 Jan 2024 H1 U1 BSD-3-Clause Yes Details →
v1.2.1 18 Oct 2023 H1 U1 BSD-3-Clause Yes Details →
v1.2.1-0.20231018112012-9dff76b55e8e 18 Oct 2023 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20230731074421-5fca2dce7a3a 31 Jul 2023 H1 U1 BSD-3-Clause Yes Details →
v1.2.1-0.20230731074421-5fca2dce7a3a 31 Jul 2023 H1 U1 BSD-3-Clause Yes Details →
v1.2.1-0.20230726072351-212775c4b758 26 Jul 2023 H1 U1 BSD-3-Clause Yes Details →
v1.2.1-0.20230715200429-888a984e373d 15 Jul 2023 H1 U1 BSD-3-Clause Yes Details →
v1.2.1-0.20230715145351-533474fd7fc8 15 Jul 2023 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20221209160046-f76c5fbfd213 09 Dec 2022 H1 U1 BSD-3-Clause Yes Details →
v1.2.1-0.20221209160046-f76c5fbfd213 09 Dec 2022 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20210520150355-8285576f31af 20 May 2021 H1 U1 BSD-3-Clause Yes Details →
v1.2.1-0.20210520150355-8285576f31af 20 May 2021 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20200913234930-c1a93f601268 13 Sep 2020 H1 U1 BSD-3-Clause Yes Details →
v1.2.1-0.20200913234930-c1a93f601268 13 Sep 2020 H1 U1 BSD-3-Clause Yes Details →
v1.2.1-0.20200913234645-ef8b0de3da93 13 Sep 2020 H1 U1 BSD-3-Clause Yes Details →
v1.2.1-0.20200913234126-43d53baeef3d 13 Sep 2020 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20200822142648-7f62815760ef 22 Aug 2020 H1 U1 BSD-3-Clause Yes Details →
v1.1.1-0.20200822142648-7f62815760ef 22 Aug 2020 H1 U1 BSD-3-Clause Yes Details →
v1.2.0 22 Aug 2020 H1 U1 BSD-3-Clause Yes Details →
v1.1.1-0.20200820041958-0cfe0ec13b0d 20 Aug 2020 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20191101142538-61751c968743 01 Nov 2019 H1 U1 BSD-3-Clause Yes Details →
v1.1.1-0.20191101142538-61751c968743 01 Nov 2019 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20190723040319-6f159e384b9b 23 Jul 2019 H1 U1 BSD-3-Clause Yes Details →
v1.1.1-0.20190723040319-6f159e384b9b 23 Jul 2019 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20190630151810-b89707bc217e 30 Jun 2019 H1 U1 BSD-3-Clause Yes Details →
v1.1.1-0.20190630151810-b89707bc217e 30 Jun 2019 H1 U1 BSD-3-Clause Yes Details →
v1.1.1-0.20190627040028-a229f532e354 27 Jun 2019 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20190322171712-d768c7020973 22 Mar 2019 H1 U1 BSD-3-Clause Yes Details →
v1.1.1-0.20190322171712-d768c7020973 22 Mar 2019 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20190321172835-124d17ef9585 21 Mar 2019 H1 U1 BSD-3-Clause Yes Details →
v1.1.0 21 Mar 2019 H1 U1 BSD-3-Clause Yes Details →
v1.0.3-0.20190320220603-b972fc2cc573 20 Mar 2019 H1 U1 BSD-3-Clause Yes Details →
v1.0.3-0.20190303120302-b4aa171a4e68 03 Mar 2019 H1 U1 BSD-3-Clause Yes Details →
v1.0.3-0.20190302163903-6889f4891bff 02 Mar 2019 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20181208210634-1618f054dd18 08 Dec 2018 H1 U1 BSD-3-Clause Yes Details →
v1.0.3-0.20181208210634-1618f054dd18 08 Dec 2018 H1 U1 BSD-3-Clause Yes Details →
v1.0.3-0.20181207164932-864f9b4b21b7 07 Dec 2018 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20181017151337-da8e73546bec 17 Oct 2018 H1 U1 BSD-3-Clause Yes Details →
v1.0.3-0.20181017151337-da8e73546bec 17 Oct 2018 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20181012153359-3750db5a7788 12 Oct 2018 H1 U1 BSD-3-Clause Yes Details →
v1.0.3-0.20181012153359-3750db5a7788 12 Oct 2018 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20180614150749-e0e4b92809ac 14 Jun 2018 H1 U1 BSD-3-Clause Yes Details →
v1.0.3-0.20180614150749-e0e4b92809ac 14 Jun 2018 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20180321163353-d0e4c24cff97 21 Mar 2018 H1 U1 BSD-3-Clause Yes Details →
v1.0.2 21 Mar 2018 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20180307155138-b0e8c201c781 07 Mar 2018 H1 U1 BSD-3-Clause Yes Details →
v1.0.1 07 Mar 2018 H1 U1 BSD-3-Clause Yes Details →
v1.0.0 22 Feb 2018 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20171228183507-afe77393c53b 28 Dec 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20171211185217-466360728514 11 Dec 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20171211162101-9fa3b6af65dc 11 Dec 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20171205074236-e929b549226a 05 Dec 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20171101174852-e6c82218a8b3 01 Nov 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20171029192438-693523c4a634 29 Oct 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170612215433-8b1100835db5 12 Jun 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170608202726-ca549c548473 08 Jun 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170412151424-1c72d0334731 12 Apr 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170317173100-f3c80893412c 17 Mar 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170317113455-2d4b2a5e9136 17 Mar 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170310203052-14a03ae69d52 10 Mar 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170224193840-64644a2fced2 24 Feb 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170222005214-1290f133e9ed 22 Feb 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170217192710-0e4426735fc1 17 Feb 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170113082130-dfd60678a603 13 Jan 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170113081729-02ddb54d7d06 13 Jan 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170112101918-f9a200395c73 12 Jan 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170108060307-5838d20c7b66 08 Jan 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170107231634-7567ce42ce2d 07 Jan 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20170107201400-1f071db1b40d 07 Jan 2017 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20160817190122-0164a00ab4cd 17 Aug 2016 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20160816184949-a30fc2876ba6 16 Aug 2016 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20160816184928-3a3a3a339302 16 Aug 2016 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20160816184853-9164c1d05735 16 Aug 2016 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20160712215244-d68043406bea 12 Jul 2016 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20160624051519-8aac656cd31c 24 Jun 2016 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20160426231512-08023a0215e7 26 Apr 2016 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20160226215149-ddf016c1034e 26 Feb 2016 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20160226212750-b8a2741348e4 26 Feb 2016 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20151015061434-14c555599c2a 15 Oct 2015 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20150929143014-b648f7af8d6f 29 Sep 2015 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20150926222758-926ebf09a267 26 Sep 2015 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20150926222355-6879e2b817d1 26 Sep 2015 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20150820051628-83d18c92c931 20 Aug 2015 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20150810042247-ba2ede47c01e 10 Aug 2015 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20150512164439-7109aabdadf8 12 May 2015 H1 U1 BSD-3-Clause Yes Details →
v0.0.0-20150422184353-ec21cc92d9d6 22 Apr 2015 H1 U1 — Yes Details →
v0.0.0-20150422170912-98a324bfd953 22 Apr 2015 H1 U1 — Yes Details →
v0.0.0-20150409061217-c66dabc31995 09 Apr 2015 H1 U1 — Yes Details →
v0.0.0-20150408200403-192ac457d8af 08 Apr 2015 H1 U1 — Yes Details →
v0.0.0-20150407183246-6e77d1705e72 07 Apr 2015 H1 U1 — Yes Details →
v0.0.0-20150407051225-0133a7d1fac4 07 Apr 2015 H1 U1 — Yes Details →
v0.0.0-20150404052545-5062a7549516 04 Apr 2015 H1 U1 — Yes Details →
v0.0.0-20150209102750-2883e2728920 09 Feb 2015 H1 U1 — Yes Details →
v0.0.0-20150206110731-09e6755435ed 06 Feb 2015 H1 U1 — Yes Details →
v0.0.0-20150105164228-c8422571edf3 05 Jan 2015 H1 U1 — Yes Details →
v0.0.0-20141231164325-88c0bf4d4e7f 31 Dec 2014 H1 U1 — Yes Details →
v0.0.0-20141230202733-84187ffe7c19 30 Dec 2014 H1 U1 — Yes Details →
v0.0.0-20140909171514-ad8849d14e5c 09 Sep 2014 H1 U1 — Yes Details →
v0.0.0-20140909170133-88d38ab7ba69 09 Sep 2014 H1 U1 — Yes Details →
v0.0.0-20140613155311-ed309eb6f98f 13 Jun 2014 H1 U1 — Yes Details →
v0.0.0-20140613153946-16d8d272e945 13 Jun 2014 H1 U1 — Yes Details →
v0.0.0-20140613133508-184ade7190d0 13 Jun 2014 H1 U1 — Yes Details →
v0.0.0-20140502114845-5ecdd513d03e 02 May 2014 H1 U1 — Yes Details →
v0.0.0-20140113222618-156ad79462e7 13 Jan 2014 H1 U1 — Yes Details →
v0.0.0-20140110060224-a97e5a17eea4 10 Jan 2014 H1 U1 — Yes Details →

The newest 120 of 133 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/gorilla/schema

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2024-37298: Memory Exhaustion Attack in github.com/gorilla/schema 7.5 high 1.4.1 01 Jul 2024
CVE-2024-37298: Potential memory exhaustion attack in github.com/gorilla/schema N/A unrated 1.4.1 02 Jul 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/gorilla/schema

Is github.com/gorilla/schema safe to use?

Vulert records 2 vulnerabilities for github.com/gorilla/schema in Go: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/gorilla/schema's Vulert package health score?

Vulert scores github.com/gorilla/schema 68/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/gorilla/schema affected?

Yes. v1.4.1, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/gorilla/schema should I use?

v1.4.1 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/gorilla/schema have?

2 vulnerabilities are recorded for github.com/gorilla/schema in the Go ecosystem: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/gorilla/schema vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/gorilla/schema in the last 12 months, and the oldest entry in this database dates to 01 Jul 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/gorilla/schema are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/gorilla/schema for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/gorilla/schema version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.