Vulnerability Database · Go · Package report
github.com/hashicorp/go-plugin: vulnerability history, versions and safety
github.com/hashicorp/go-plugin is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/hashicorp/go-plugin v1.8.0 i
Updated on 23 Oct 2026
Good news: v1.8.0, the version you would install today, has no known vulnerabilities.
- Security No known security issues
- Maintenance Sustainable
- Popularity Key ecosystem project
- Community Moderate
What to do: Stay on v1.8.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.8.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v1.8.0 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 6,107 i
- OpenSSF scorecard 6/10 i
- Last release 5 months ago i
- Licence MPL-2.0 i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/hashicorp/go-plugin, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v1.8.1-0.20261012062831-fa60f8a91608 12 Oct 2026
- v1.8.1-0.20261008125059-9d5088a91ee3 08 Oct 2026
- v1.8.1-0.20260928064630-3dd89e7ef758 28 Sep 2026
- v1.8.1-0.20260907063606-aa727ed701d1 07 Sep 2026
- v1.8.1-0.20260901063812-16c635df7980 01 Sep 2026
- v1.8.1-0.20260827063047-434af0fa4771 27 Aug 2026
- v1.8.1-0.20260824061118-f1ad9ccac689 24 Aug 2026
- v1.8.1-0.20260817072910-dd3617ad0257 17 Aug 2026
- v1.8.1-0.20260803063447-bb02ea631438 03 Aug 2026
- v1.8.1-0.20260727061754-6c25fd9ffe73 27 Jul 2026
- v1.8.1-0.20260720063433-290c7b941c32 20 Jul 2026
- v1.8.1-0.20260706060843-816c372cede7 06 Jul 2026
- v1.8.1-0.20260629100608-8490cd021266 29 Jun 2026
- v1.8.1-0.20260626113307-2d71c1b8b0e6 26 Jun 2026
- v0.0.0-20260604125915-b1b8a89a79c4 04 Jun 2026
- v1.8.1-0.20260604125915-b1b8a89a79c4 04 Jun 2026
- v1.8.1-0.20260521192041-75ec01ae088b 21 May 2026
- v1.8.0 29 Apr 2026
- v1.7.1-0.20260302092452-6a56553ba88e 02 Mar 2026
- v1.7.1-0.20260209071951-abeb978c3d6f 09 Feb 2026
- v1.7.1-0.20251208132317-31383c00145b 08 Dec 2025
- v1.7.1-0.20251118083103-058fe18be2b6 18 Nov 2025
- v1.7.1-0.20250908094356-d0d30899ca2d 08 Sep 2025
- v1.7.1-0.20250825062842-8e5510615a22 25 Aug 2025
- v1.7.1-0.20250813070211-113428b911c3 13 Aug 2025
- v1.7.0 11 Aug 2025
- v1.6.4-0.20250808141630-d2a064ec63aa 08 Aug 2025
- v1.6.4-0.20250807173122-b02adb3fdfef 07 Aug 2025
- v1.6.4-0.20250701111743-a938e9a33851 01 Jul 2025
- v1.6.4-0.20250617044721-f4acdfe4f62c 17 Jun 2025
- v1.6.4-0.20250612054644-64b8d7614c8e 12 Jun 2025
- v1.6.4-0.20250610133547-21b9619042fc 10 Jun 2025
- v1.6.4-0.20250606185621-f968ec0f59f7 06 Jun 2025
- v0.0.0-20250321135749-cfdf48578360 21 Mar 2025
- v1.6.4-0.20250321135749-cfdf48578360 21 Mar 2025
- v1.6.4-0.20250304172127-a8be8f53ca5d 04 Mar 2025
- v1.6.4-0.20250304070334-92e270ce12fe 04 Mar 2025
- v1.6.3 23 Jan 2025
- v1.6.3-0.20241119055336-2f0e0da4deaf 19 Nov 2024
- v1.6.2 21 Oct 2024
- v1.6.2-0.20241021183740-edcdee4bf298 21 Oct 2024
- v1.6.2-0.20241021133120-7e5ceaa743d6 21 Oct 2024
- v1.6.2-0.20241016211500-0c4f5641082a 16 Oct 2024
- v1.6.2-0.20240829161738-06afb6d7ae99 29 Aug 2024
- v0.0.0-20240709154048-0e45961bf24c 09 Jul 2024
- v1.6.2-0.20240709154048-0e45961bf24c 09 Jul 2024
- v1.6.1 10 May 2024
- v1.6.1-0.20240510160440-721087dad1e6 10 May 2024
- v1.6.1-0.20240212191955-8d2aaa458971 12 Feb 2024
- v1.6.0 13 Nov 2023
- v1.5.3-0.20231025164117-017b758bf4d4 25 Oct 2023
- v1.5.3-0.20231025163852-0b28f225bcb4 25 Oct 2023
- v1.5.3-0.20231016113620-337cd57f37a8 16 Oct 2023
- v1.5.3-0.20231012110245-5492ff9dd214 12 Oct 2023
- v1.5.3-0.20231007125403-5258a3c9511e 07 Oct 2023
- v0.0.0-20230922102829-303d84fc850f 22 Sep 2023
- v1.5.2 22 Sep 2023
- v1.5.2-0.20230921162425-bf6a95ecd63d 21 Sep 2023
- v1.5.2-0.20230921152805-8dceed2a7fe4 21 Sep 2023
- v1.5.1 05 Sep 2023
- v1.5.1-0.20230904131810-817b3dafdeb1 04 Sep 2023
- v1.5.1-0.20230904121732-fd6454b7a40b 04 Sep 2023
- v1.5.1-0.20230904102808-483ecf04e37b 04 Sep 2023
- v1.5.1-0.20230902194902-80fd66fdb07c 02 Sep 2023
- v1.5.1-0.20230901160833-94368a4189aa 01 Sep 2023
- v1.4.11-rc1.0.20230829212551-c1fefa808d91 29 Aug 2023
- v1.5.0 29 Aug 2023
- v1.4.11-rc1.0.20230829162131-f73a4982b4e3 29 Aug 2023
- v1.4.11-rc1.0.20230829131829-5683736783bd 29 Aug 2023
- v1.4.11-rc1.0.20230829115212-034fd2a1c8b9 29 Aug 2023
- v1.4.11-rc1.0.20230828203855-94ad864811ad 28 Aug 2023
- v1.4.11-rc1.0.20230825194006-80216d7f2c61 25 Aug 2023
- v1.4.11-rc1.0.20230825130417-c865ce29af77 25 Aug 2023
- v1.4.11-rc1.0.20230825122419-d260606ec697 25 Aug 2023
- v1.4.11-rc1.0.20230825121839-93ec1744b4f3 25 Aug 2023
- v1.4.11-rc1.0.20230825120311-d8a526c0cfa5 25 Aug 2023
- v1.4.11-rc1.0.20230825115228-6fadb29a13f0 25 Aug 2023
- v1.4.11-rc1.0.20230825113755-e745070b8988 25 Aug 2023
- v1.4.11-rc1.0.20230825102857-8b178aa46bb3 25 Aug 2023
- v1.4.11-rc1.0.20230824204123-ea795a53523c 24 Aug 2023
- v1.4.11-rc1.0.20230822205043-de198199a241 22 Aug 2023
- v1.4.11-rc1.0.20230822104347-e18f9e8bce6e 22 Aug 2023
- v0.0.0-20230811233052-c57883964917 11 Aug 2023
- v1.4.11-0.20230811233052-c57883964917 11 Aug 2023
- v1.4.11-rc1 11 Aug 2023
- v0.0.0-20230602162408-a88a423a8813 02 Jun 2023
- v1.4.10 02 Jun 2023
- v1.4.10-0.20230602162408-a88a423a8813 02 Jun 2023
- v0.0.0-20230403150917-e889c1ba1044 03 Apr 2023
- v1.4.10-0.20230403150917-e889c1ba1044 03 Apr 2023
- v1.4.10-0.20230321181155-4b35dc2fedaa 21 Mar 2023
- v1.4.10-0.20230306173702-d78f3fc2891d 06 Mar 2023
- v1.4.10-0.20230306162157-930b2bfb2bd2 06 Mar 2023
- v1.4.9 02 Mar 2023
- v1.4.9-0.20230201173135-84014b780e9b 01 Feb 2023
- v1.4.8 07 Dec 2022
- v1.4.7 06 Dec 2022
- v1.4.7-0.20221205220447-5ecc4fb8a165 05 Dec 2022
- v1.4.7-0.20221202232518-e3c0d2e67034 02 Dec 2022
- v1.4.6 08 Nov 2022
- v1.4.6-0.20221108185034-1139bff62cd3 08 Nov 2022
- v1.4.6-0.20221012205357-118b62ab9a5d 12 Oct 2022
- v1.4.6-0.20221012092733-f836044b3675 12 Oct 2022
- v1.4.5 18 Aug 2022
- v1.4.5-0.20220818160822-27115fc7ad5d 18 Aug 2022
- v1.4.5-0.20220817194239-8d2b4741778f 17 Aug 2022
- v1.4.5-0.20220531211040-a02e5c7a911d 31 May 2022
- v1.4.5-0.20220518152325-11fe5151ab60 18 May 2022
- v0.0.0-20220518150201-afba0877ba10 18 May 2022
- v1.4.5-0.20220518150201-afba0877ba10 18 May 2022
- v0.0.0-20220518071110-dab85be20db7 18 May 2022
- v1.4.5-0.20220518071110-dab85be20db7 18 May 2022
- v1.4.1-0.20220505145433-3ce999f28e9f 05 May 2022
- v1.4.5-0.20220505145433-3ce999f28e9f 05 May 2022
- v1.4.4 03 May 2022
- v1.4.4-0.20220503191338-5dee41c45dce 03 May 2022
- v1.4.4-0.20220503001739-e4102ee63e7a 03 May 2022
- v1.4.4-0.20220503001259-18a4e1f1ce78 03 May 2022
- v1.4.4-0.20220429014938-afb16599348a 29 Apr 2022
- v1.4.4-0.20220428153655-0b28f283ab09 28 Apr 2022
The newest 120 of 249 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/hashicorp/go-plugin
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/hashicorp/go-plugin
Is github.com/hashicorp/go-plugin safe to use?
Vulert has no vulnerabilities on record for github.com/hashicorp/go-plugin in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/hashicorp/go-plugin's Vulert package health score?
Vulert scores github.com/hashicorp/go-plugin 86/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/hashicorp/go-plugin affected?
No. v1.8.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of github.com/hashicorp/go-plugin should I use?
v1.8.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does github.com/hashicorp/go-plugin have?
0 vulnerabilities are recorded for github.com/hashicorp/go-plugin in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/hashicorp/go-plugin vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/hashicorp/go-plugin in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/hashicorp/go-plugin are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/hashicorp/go-plugin for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/hashicorp/go-plugin version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.