VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/gotd/td: vulnerability history, versions and safety

github.com/gotd/td is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from Jul 2026 to Aug 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded H1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
2 in the last 12 months

Most recent disclosure 18 Aug 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/gotd/td vulnerabilities

Vulert verdict on github.com/gotd/td v0.163.0 i

Updated on 23 Oct 2026

Action needed: v0.163.0 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 80/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.163.0 — affected i
  • Vulnerabilities on record 2 over 1 year · 2 in the last year i
  • Latest disclosure 18 Aug 2026 i
  • Highest CVSS 7.5 i
  • With no published fix 0 i
  • Stars 2,364 i
  • OpenSSF scorecard 5/10 i
  • Last release this month i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/gotd/td, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20261022183436-314d9de7c1d0 22 Oct 2026 H1 U1 MIT Yes Details →
v0.163.0 22 Oct 2026 H1 U1 MIT Yes Details →
v0.162.1-0.20261009143920-010164395f88 09 Oct 2026 H1 U1 MIT Yes Details →
v0.0.0-20260918101526-be24580163e1 18 Sep 2026 H1 U1 MIT Yes Details →
v0.162.0 18 Sep 2026 H1 U1 MIT Yes Details →
v0.161.1-0.20260825082230-60f4c4b618d9 25 Aug 2026 H1 U1 MIT Yes Details →
v0.0.0-20260728180007-d0d567ee95e6 28 Jul 2026 H1 U1 MIT Yes Details →
v0.161.1-0.20260728180007-d0d567ee95e6 28 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260728100549-089a561a46ca 28 Jul 2026 H1 U1 MIT Yes Details →
v0.161.1-0.20260728100549-089a561a46ca 28 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260727074159-7493570b9779 27 Jul 2026 H1 U1 MIT Yes Details →
v0.161.1-0.20260727074159-7493570b9779 27 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260724072435-a5506ded0d75 24 Jul 2026 H1 U1 MIT Yes Details →
v0.161.1-0.20260724072435-a5506ded0d75 24 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260721073954-eb1128fbda67 21 Jul 2026 H1 U1 MIT Yes Details →
v0.161.1-0.20260721073954-eb1128fbda67 21 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260720164555-a51c54126079 20 Jul 2026 H1 U1 MIT Yes Details →
v0.161.1-0.20260720164555-a51c54126079 20 Jul 2026 H1 U1 MIT Yes Details →
v0.161.1-0.20260720113319-ede0407cc39d 20 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260716073834-e7d5e7882d4a 16 Jul 2026 H1 U1 MIT Yes Details →
v0.161.1-0.20260716073834-e7d5e7882d4a 16 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260715131637-8d201629852f 15 Jul 2026 H1 U1 MIT Yes Details →
v0.161.1-0.20260715131637-8d201629852f 15 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260714180959-d642c299fe12 14 Jul 2026 H1 U1 MIT Yes Details →
v0.161.0 14 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260714150601-5b16eff5eaf8 14 Jul 2026 H1 U1 MIT Yes Details →
v0.160.1-0.20260714150601-5b16eff5eaf8 14 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260709091629-731927a20b83 09 Jul 2026 H1 U1 MIT Yes Details →
v0.160.1-0.20260709091629-731927a20b83 09 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260709080627-37dc655665f3 09 Jul 2026 H1 U1 MIT Yes Details →
v0.160.1-0.20260709080627-37dc655665f3 09 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260707130410-2b2010633e7a 07 Jul 2026 H1 U1 MIT Yes Details →
v0.160.1-0.20260707130410-2b2010633e7a 07 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260707124511-9a6ccb7e63db 07 Jul 2026 H1 U1 MIT Yes Details →
v0.160.0 07 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260703090141-9e5dde8b2a75 03 Jul 2026 H1 U1 MIT Yes Details →
v0.159.1-0.20260703090141-9e5dde8b2a75 03 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260702073301-e531314925b1 02 Jul 2026 H1 U1 MIT Yes Details →
v0.159.1-0.20260702073301-e531314925b1 02 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260701093117-7f46f08fda64 01 Jul 2026 H1 U1 MIT Yes Details →
v0.159.1-0.20260701093117-7f46f08fda64 01 Jul 2026 H1 U1 MIT Yes Details →
v0.0.0-20260630072804-2755f70e0c5e 30 Jun 2026 H1 U1 MIT Yes Details →
v0.159.1-0.20260630072804-2755f70e0c5e 30 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260629072342-c3bb00705aeb 29 Jun 2026 H1 U1 MIT Yes Details →
v0.159.1-0.20260629072342-c3bb00705aeb 29 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260626072617-4e65120f6ba3 26 Jun 2026 H1 U1 MIT Yes Details →
v0.159.1-0.20260626072617-4e65120f6ba3 26 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260624094245-a66bfee50486 24 Jun 2026 H1 U1 MIT Yes Details →
v0.159.1-0.20260624094245-a66bfee50486 24 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260622170244-6506bee198f3 22 Jun 2026 H1 U1 MIT Yes Details →
v0.159.1-0.20260622170244-6506bee198f3 22 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260622122224-c867f5fefc13 22 Jun 2026 H1 U1 MIT Yes Details →
v0.159.1-0.20260622122224-c867f5fefc13 22 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260622080016-c312b6eaa42e 22 Jun 2026 H1 U1 MIT Yes Details →
v0.159.1-0.20260622080016-c312b6eaa42e 22 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260619072946-a80cdf73d0a6 19 Jun 2026 H1 U1 MIT Yes Details →
v0.159.1-0.20260619072946-a80cdf73d0a6 19 Jun 2026 H1 U1 MIT Yes Details →
v0.159.0 19 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260617072919-b5440dfab822 17 Jun 2026 H1 U1 MIT Yes Details →
v0.158.1-0.20260617072919-b5440dfab822 17 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260616232217-c1ce7b9d77b4 16 Jun 2026 H1 U1 MIT Yes Details →
v0.158.1-0.20260616232217-c1ce7b9d77b4 16 Jun 2026 H1 U1 MIT Yes Details →
v0.158.0 16 Jun 2026 H1 U1 MIT Yes Details →
v0.157.2 16 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260615134933-d5a83982f138 15 Jun 2026 H1 U1 MIT Yes Details →
v0.157.2-0.20260615134933-d5a83982f138 15 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260615102941-f3f745a2de3b 15 Jun 2026 H1 U1 MIT Yes Details →
v0.157.2-0.20260615102941-f3f745a2de3b 15 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260615073320-69eada4f0f53 15 Jun 2026 H1 U1 MIT Yes Details →
v0.157.1 15 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260615063525-8ffeaeae10d5 15 Jun 2026 H1 U1 MIT Yes Details →
v0.157.0 15 Jun 2026 H1 U1 MIT Yes Details →
v0.156.4-0.20260615062737-cf95cfd3c435 15 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260615060122-0fc5db1a2e6b 15 Jun 2026 H1 U1 MIT Yes Details →
v0.156.4-0.20260615060122-0fc5db1a2e6b 15 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260615042413-479397208fbf 15 Jun 2026 H1 U1 MIT Yes Details →
v0.156.4-0.20260615042413-479397208fbf 15 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260615003804-f74d0d117a93 15 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260615000803-38b2b549decd 15 Jun 2026 H1 U1 MIT Yes Details →
v0.156.4-0.20260615000803-38b2b549decd 15 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260614193908-5e4cd68a6720 14 Jun 2026 H1 U1 MIT Yes Details →
v0.156.4-0.20260614193908-5e4cd68a6720 14 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260614124600-4da851b11db1 14 Jun 2026 H1 U1 MIT Yes Details →
v0.156.4-0.20260614124600-4da851b11db1 14 Jun 2026 H1 U1 MIT Yes Details →
v0.156.3 14 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260614042237-406a51b8afc7 14 Jun 2026 H1 U1 MIT Yes Details →
v0.156.2 14 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260613205608-dd45993e5338 13 Jun 2026 H1 U1 MIT Yes Details →
v0.156.1 13 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260613115105-429a09dd18a5 13 Jun 2026 H1 U1 MIT Yes Details →
v0.156.0 13 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260612203418-15e343985faf 12 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260612185118-6138c4aa37ef 12 Jun 2026 H1 U1 MIT Yes Details →
v0.154.1-0.20260612185118-6138c4aa37ef 12 Jun 2026 H1 U1 MIT Yes Details →
v0.155.0 12 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260612163138-5bd59fffed02 12 Jun 2026 H1 U1 MIT Yes Details →
v0.154.1-0.20260612163138-5bd59fffed02 12 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260612162558-d691330721ed 12 Jun 2026 H1 U1 MIT Yes Details →
v0.154.1-0.20260612162558-d691330721ed 12 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260612161731-44e82fdb1e5f 12 Jun 2026 H1 U1 MIT Yes Details →
v0.0.0-20260612144543-6ac046255226 12 Jun 2026 H1 U1 — Yes Details →
v0.154.0 12 Jun 2026 H1 U1 — Yes Details →
v0.0.0-20260612121107-e1eca1e81f85 12 Jun 2026 H1 U1 — Yes Details →
v0.153.0 12 Jun 2026 H1 U1 — Yes Details →
v0.0.0-20260612072404-ed4b8cbb6c33 12 Jun 2026 H1 U1 — Yes Details →
v0.152.1-0.20260612072404-ed4b8cbb6c33 12 Jun 2026 H1 U1 — Yes Details →
v0.0.0-20260611210340-218bea0e22de 11 Jun 2026 H1 U1 — Yes Details →
v0.152.0 11 Jun 2026 H1 U1 — Yes Details →
v0.0.0-20260611161102-a687dc794b18 11 Jun 2026 H1 U1 — Yes Details →
v0.151.1-0.20260611161102-a687dc794b18 11 Jun 2026 H1 U1 — Yes Details →
v0.0.0-20260611154350-feb37ee1d297 11 Jun 2026 H1 U1 — Yes Details →
v0.0.0-20260611151327-507587ab6374 11 Jun 2026 H1 U1 — Yes Details →
v0.151.1-0.20260611151327-507587ab6374 11 Jun 2026 H1 U1 — Yes Details →
v0.0.0-20260611133116-6b56fd0b1fdb 11 Jun 2026 H1 U1 — Yes Details →
v0.0.0-20260611125759-2572ecca78d3 11 Jun 2026 H1 U1 — Yes Details →
v0.151.1-0.20260611125759-2572ecca78d3 11 Jun 2026 H1 U1 — Yes Details →
v0.0.0-20260611112947-667a066e54da 11 Jun 2026 H1 U1 — Yes Details →
v0.0.0-20260611105643-ad595a7d4ec5 11 Jun 2026 H1 U1 — Yes Details →
v0.151.0 11 Jun 2026 H1 U1 — Yes Details →
v0.0.0-20260611041943-4fdbf0b76e85 11 Jun 2026 H1 U1 — Yes Details →

The newest 120 of 1,025 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2026 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 2 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/gotd/td

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2026-54638: Denial of Service in github.com/gotd/td Due to Unbounded Memory Allocation 7.5 high 0.145.1 28 Jul 2026
CVE-2026-54638: Unbounded Memory Allocation in github.com/gotd/td Package N/A unrated 0.145.1 18 Aug 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/gotd/td

Is github.com/gotd/td safe to use?

Vulert records 2 vulnerabilities for github.com/gotd/td in Go: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/gotd/td's Vulert package health score?

Vulert scores github.com/gotd/td 80/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/gotd/td affected?

Yes. v0.163.0, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does github.com/gotd/td have?

2 vulnerabilities are recorded for github.com/gotd/td in the Go ecosystem: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/gotd/td vulnerabilities disclosed?

2 vulnerabilities were recorded for github.com/gotd/td in the last 12 months, and the oldest entry in this database dates to 28 Jul 2026. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/gotd/td are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/gotd/td for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/gotd/td version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.