Vulnerability Database · Go · Package report
github.com/hashicorp/go-metrics: vulnerability history, versions and safety
github.com/hashicorp/go-metrics is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/hashicorp/go-metrics v0.7.0 i
Updated on 23 Oct 2026
Good news: v0.7.0, the version you would install today, has no known vulnerabilities.
- Security No known security issues
- Maintenance Sustainable
- Popularity Widely used
- Community Moderate
What to do: Stay on v0.7.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.7.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v0.7.0 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 1,580 i
- OpenSSF scorecard 6/10 i
- Last release 1 month ago i
- Licence MIT i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/hashicorp/go-metrics, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v0.7.1-0.20261019122507-2a8678456440 19 Oct 2026
- v0.7.1-0.20261012063238-a8602d0c3fa4 12 Oct 2026
- v0.7.1-0.20261005154646-9b7748a9dc7a 05 Oct 2026
- v0.7.0 16 Sep 2026
- v0.6.2-0.20260907064447-465585286d74 07 Sep 2026
- v0.6.2-0.20260828150421-23523bcd2cff 28 Aug 2026
- v0.6.2-0.20260817073413-82bded67d9a9 17 Aug 2026
- v0.6.1 29 Jul 2026
- v0.6.1-0.20260720063921-96fa24ee4d34 20 Jul 2026
- v0.6.1-0.20260713125436-110cec771d0e 13 Jul 2026
- v0.6.1-0.20260706061129-409c090d1863 06 Jul 2026
- v0.6.1-0.20260629062725-3d241972524d 29 Jun 2026
- v0.6.0 24 Jun 2026
- v0.5.5-0.20260622135840-b3223c7f93dc 22 Jun 2026
- v0.5.5-0.20260612130904-ff4b5d9af23b 12 Jun 2026
- v0.5.5-0.20260522085523-4f22c66c69f8 22 May 2026
- v0.5.5-0.20251123040640-9e57633cc9a4 23 Nov 2025
- v0.5.5-0.20251120112140-72b7ca75c01e 20 Nov 2025
- v0.0.0-20250908085509-8f13a6de82d1 08 Sep 2025
- v0.5.5-0.20250908085509-8f13a6de82d1 08 Sep 2025
- v0.5.5-0.20250907040457-5b7c4f1ec6a7 07 Sep 2025
- v0.5.5-0.20250825062555-de03f7f4a299 25 Aug 2025
- v0.5.4-0.20250701111436-d18ef2d554c2 01 Jul 2025
- v0.5.5-0.20250701111436-d18ef2d554c2 01 Jul 2025
- v0.5.5-0.20250614084358-b28cab05741c 14 Jun 2025
- v0.5.5-0.20250612181106-33d8435f41f6 12 Jun 2025
- v0.5.5-0.20250611093149-8d68a3ce3014 11 Jun 2025
- v0.5.5-0.20250606091232-426cc65b4860 06 Jun 2025
- v0.5.5-0.20250605133843-a2f9052c8940 05 Jun 2025
- v0.5.5-0.20250421054825-0fbebb2442d9 21 Apr 2025
- v0.5.5-0.20250314045207-c3f33eded836 14 Mar 2025
- v0.5.5-0.20250313184248-34be505bcd97 13 Mar 2025
- v0.5.5-0.20250116143118-cd5c0efcc5c4 16 Jan 2025
- v0.5.5-0.20250113160346-4555ec4d2286 13 Jan 2025
- v0.5.4 08 Jan 2025
- v0.5.4-0.20250106150336-8abec476408a 06 Jan 2025
- v0.5.4-0.20241118155320-c5fef7bda84c 18 Nov 2024
- v0.5.4-0.20241118040143-a55fcdab00b0 18 Nov 2024
- v0.5.4-0.20241111182750-ceaacca141e7 11 Nov 2024
- v0.5.4-0.20240522130843-0ec744010d01 22 May 2024
- v0.5.4-0.20240305223922-4c2c81a4bb2e 05 Mar 2024
- v0.5.4-0.20231204160345-242e3f6e9254 04 Dec 2023
- v0.5.3 27 Nov 2023
- v0.5.3-0.20231127214448-9d55fb233b15 27 Nov 2023
- v0.5.2 14 Nov 2023
- v0.5.2-0.20231114145403-9bd01952d386 14 Nov 2023
- v0.5.1 09 Jun 2023
- v0.5.1-0.20230609091746-25a7551ebad1 09 Jun 2023
- v0.4.2 08 Jun 2023
- v0.5.0 08 Jun 2023
- v0.4.2-0.20230607140644-94aba96e4471 07 Jun 2023
- v0.4.2-0.20230519112806-858601465fcd 19 May 2023
- v0.4.2-0.20230519110409-eb30b884ddcb 19 May 2023
- v0.4.2-0.20230215032618-ffb91e76dbfa 15 Feb 2023
- v0.4.2-0.20230126195611-9c4352b04df8 26 Jan 2023
- v0.4.2-0.20221220172610-8cabd9eab1be 20 Dec 2022
- v0.4.2-0.20221220172422-4cdfd1779be4 20 Dec 2022
- v0.4.2-0.20221122092859-b5bac62197bd 22 Nov 2022
- v0.0.0-20181113163423-cc7560c89d09 13 Nov 2018
- v0.0.0-20180917152333-f0300d1749da 17 Sep 2018
- v0.0.0-20180912093507-023763fcad13 12 Sep 2018
- v0.0.0-20180713145231-3c58d8115a78 13 Jul 2018
- v0.0.0-20180713141322-36a5f4ea8072 13 Jul 2018
- v0.0.0-20180620213357-58588f401c2c 20 Jun 2018
- v0.0.0-20180604234451-ed591ab855a8 04 Jun 2018
- v0.0.0-20180510130752-abe0f181cf50 10 May 2018
- v0.0.0-20180502081922-067b63b1ff29 02 May 2018
- v0.0.0-20180221182744-783273d70314 21 Feb 2018
- v0.0.0-20171117184120-7aa49fde8082 17 Nov 2017
- v0.0.0-20171116012134-5f4621eaf886 16 Nov 2017
- v0.0.0-20171002182731-9a4b6e10bed6 02 Oct 2017
- v0.0.0-20170919194620-fb1aa698e9d7 19 Sep 2017
- v0.0.0-20170919102504-461537a9595c 19 Sep 2017
- v0.0.0-20170913184837-0a12dc6f6b9d 13 Sep 2017
- v0.0.0-20170901105458-36793e263b7e 01 Sep 2017
- v0.0.0-20170809011644-023a4bbe4bb9 09 Aug 2017
- v0.0.0-20170808025817-13e1df05b4da 08 Aug 2017
- v0.0.0-20170601214432-f036747b9d0e 01 Jun 2017
- v0.0.0-20170601214241-8f5b8b8b9cc0 01 Jun 2017
- v0.0.0-20170530115324-7fba69f10e70 30 May 2017
- v0.0.0-20170526193029-235cbabdc637 26 May 2017
- v0.0.0-20170114134737-93f237eba9b0 14 Jan 2017
- v0.0.0-20170114074547-0f8cac809bec 14 Jan 2017
- v0.0.0-20161105010238-97c69685293d 05 Nov 2016
- v0.0.0-20160717043458-3df31a1ada83 17 Jul 2016
- v0.0.0-20160712174712-2580c72a73a7 12 Jul 2016
- v0.0.0-20160711201235-2fbaa7c10498 11 Jul 2016
- v0.0.0-20160601175857-82c476279e89 01 Jun 2016
- v0.0.0-20160521002216-f1499b7054cf 21 May 2016
- v0.0.0-20160426222312-b291eb9384b2 26 Apr 2016
- v0.0.0-20160307061154-f303b03b91d7 07 Mar 2016
- v0.0.0-20160301054330-a384bf8b4e4b 01 Mar 2016
- v0.0.0-20151231010739-345426c77237 31 Dec 2015
- v0.0.0-20151207025452-06b609997662 07 Dec 2015
- v0.0.0-20150820181824-6c5fa0d8f48f 20 Aug 2015
- v0.0.0-20150601112433-b2d95e5291cd 01 Jun 2015
- v0.0.0-20150324205955-a54701ebec11 24 Mar 2015
- v0.0.0-20150322015117-a7a8f2e81b34 22 Mar 2015
- v0.0.0-20150202212750-88b7658f2451 02 Feb 2015
- v0.0.0-20150106224455-eb0af217e5e9 06 Jan 2015
- v0.0.0-20141117170343-02a28a76dd20 17 Nov 2014
- v0.0.0-20140902183540-2b75159ce5d3 02 Sep 2014
- v0.0.0-20140225003828-e12c3591b520 25 Feb 2014
- v0.0.0-20140129184426-a15f9697c857 29 Jan 2014
- v0.0.0-20140128223143-478f387307e1 28 Jan 2014
- v0.0.0-20130812170203-72e4a05e94e9 12 Aug 2013
- v0.0.0-20130809184519-0e9851c8c948 09 Aug 2013
All 107 versions Vulert tracks for this package. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/hashicorp/go-metrics
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/hashicorp/go-metrics
Is github.com/hashicorp/go-metrics safe to use?
Vulert has no vulnerabilities on record for github.com/hashicorp/go-metrics in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/hashicorp/go-metrics's Vulert package health score?
Vulert scores github.com/hashicorp/go-metrics 85/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/hashicorp/go-metrics affected?
No. v0.7.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of github.com/hashicorp/go-metrics should I use?
v0.7.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does github.com/hashicorp/go-metrics have?
0 vulnerabilities are recorded for github.com/hashicorp/go-metrics in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/hashicorp/go-metrics vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/hashicorp/go-metrics in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/hashicorp/go-metrics are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/hashicorp/go-metrics for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/hashicorp/go-metrics version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.