VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/hashicorp/vault-plugin-secrets-gcp: vulnerability history, versions and safety

github.com/hashicorp/vault-plugin-secrets-gcp is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from May 2021 to Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded C1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/hashicorp/vault-plugin-secrets-gcp vulnerabilities

Vulert verdict on github.com/hashicorp/vault-plugin-secrets-gcp v0.25.1 i

Updated on 23 Oct 2026

Action needed: v0.25.1 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 70/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.25.1 — affected i
  • Vulnerabilities on record 2 over 3 years · 0 in the last year i
  • Latest disclosure 21 Aug 2024 i
  • Highest CVSS 9.8 i
  • With no published fix 0 i
  • Stars 55 i
  • OpenSSF scorecard 4/10 i
  • Last release this month i
  • Licence MPL-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/hashicorp/vault-plugin-secrets-gcp, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.25.1 22 Oct 2026 C1 U1 MPL-2.0 Yes Details →
v0.25.1-0.20261001010042-9214c0b97121 01 Oct 2026 C1 U1 MPL-2.0 Yes Details →
v0.25.0 18 Sep 2026 C1 U1 MPL-2.0 Yes Details →
v0.24.1-0.20260902213211-de9c361e8410 02 Sep 2026 C1 U1 MPL-2.0 Yes Details →
v0.24.1-0.20260901005824-1561dc5509f3 01 Sep 2026 C1 U1 MPL-2.0 Yes Details →
v0.24.1-0.20260812180402-b68b34290d80 12 Aug 2026 C1 U1 MPL-2.0 Yes Details →
v0.24.1-0.20260801004914-252dcf6bc51b 01 Aug 2026 C1 U1 MPL-2.0 Yes Details →
v0.24.1-0.20260701011345-0be84c5afbdc 01 Jul 2026 C1 U1 MPL-2.0 Yes Details →
v0.24.1-0.20260619033441-2a92a57db07e 19 Jun 2026 C1 U1 MPL-2.0 Yes Details →
v0.24.1-0.20260601011651-242e46f4fc1d 01 Jun 2026 C1 U1 MPL-2.0 Yes Details →
v0.24.1-0.20260501010505-f339504b7115 01 May 2026 C1 U1 MPL-2.0 Yes Details →
v0.24.1-0.20260401005349-b15c31ad06ca 01 Apr 2026 C1 U1 MPL-2.0 Yes Details →
v0.24.0 20 Mar 2026 C1 U1 MPL-2.0 Yes Details →
v0.23.1-0.20260301004921-e141ea30c33d 01 Mar 2026 C1 U1 MPL-2.0 Yes Details →
v0.23.1-0.20260201005026-d125d0aaaca9 01 Feb 2026 C1 U1 MPL-2.0 Yes Details →
v0.23.1-0.20260122194218-d6876b3d0b3d 22 Jan 2026 C1 U1 MPL-2.0 Yes Details →
v0.23.1-0.20260101004021-986a333598ab 01 Jan 2026 C1 U1 MPL-2.0 Yes Details →
v0.23.1-0.20251201004110-4ae9aa29bc64 01 Dec 2025 C1 U1 MPL-2.0 Yes Details →
v0.23.1-0.20251101003459-f7b0fd32cdfd 01 Nov 2025 C1 U1 MPL-2.0 Yes Details →
v0.23.1-0.20251017163702-534ff3f6a640 17 Oct 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.2 01 Oct 2025 C1 U1 MPL-2.0 Yes Details →
v0.23.0 01 Oct 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1-0.20251001215830-d553a74f7086 01 Oct 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1-0.20251001003530-f16b8c441d24 01 Oct 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1-0.20250901003900-49623830cda3 01 Sep 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1-0.20250829181642-2d9ead14c24d 29 Aug 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1-0.20250811174023-61d8176be9cb 11 Aug 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1-0.20250801004050-38a13548efb7 01 Aug 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1-0.20250730152451-2ad4a7fbf9b9 30 Jul 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1-0.20250728232643-71c72f1f601c 28 Jul 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1-0.20250728214759-caa3be978ab6 28 Jul 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1-0.20250724182516-cbea6b219043 24 Jul 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1-0.20250722001355-486dae22bfb2 22 Jul 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1 21 Jul 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.4 21 Jul 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1-0.20250717220255-ccfa4d7585db 17 Jul 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.1-0.20250701003835-69e9b86949b5 01 Jul 2025 C1 U1 MPL-2.0 Yes Details →
v0.22.0 04 Jun 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.3-0.20250602220840-46e90891144e 02 Jun 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.3-0.20250601004129-388bd7e6f447 01 Jun 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.3-0.20250501003555-d48154f3a053 01 May 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.3-0.20250401003506-4a088c9a8cbe 01 Apr 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.3 28 Mar 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.3-0.20250328161230-b3836aefccad 28 Mar 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.3-0.20250326170104-60e0d58fc2e8 26 Mar 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.2 20 Mar 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.2-0.20250319214310-f9f4d6eda163 19 Mar 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.2-0.20250301003159-6a90c14f54a6 01 Mar 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.1 27 Feb 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.1-0.20250227002857-a9adf43caa6c 27 Feb 2025 C1 U1 MPL-2.0 Yes Details →
v0.21.0 13 Feb 2025 C1 U1 MPL-2.0 Yes Details →
v0.20.1-0.20250212224014-589408b8e006 12 Feb 2025 C1 U1 MPL-2.0 Yes Details →
v0.20.1-0.20250212211522-fefdc0692e0b 12 Feb 2025 C1 U1 MPL-2.0 Yes Details →
v0.20.1-0.20250211220323-ffa359e1ab75 11 Feb 2025 C1 U1 MPL-2.0 Yes Details →
v0.20.1-0.20241112142754-8f844066f6e7 12 Nov 2024 C1 U1 MPL-2.0 Yes Details →
v0.20.1-0.20241101003127-d868f0e08073 01 Nov 2024 C1 U1 MPL-2.0 Yes Details →
v0.20.1 25 Oct 2024 C1 U1 MPL-2.0 Yes Details →
v0.20.1-0.20241025191329-26457a555327 25 Oct 2024 C1 U1 MPL-2.0 Yes Details →
v0.20.1-0.20241022173054-f3b4b2485c95 22 Oct 2024 C1 U1 MPL-2.0 Yes Details →
v0.20.1-0.20241021234951-97bfcdc7a38c 21 Oct 2024 C1 U1 MPL-2.0 Yes Details →
v0.20.1-0.20241001003057-7c7870fa1ce2 01 Oct 2024 C1 U1 MPL-2.0 Yes Details →
v0.19.1-0.20240909171202-7a4180a04088 09 Sep 2024 C1 U1 MPL-2.0 Yes Details →
v0.20.0 09 Sep 2024 C1 U1 MPL-2.0 Yes Details →
v0.19.1-0.20240904180401-0387115c0fd9 04 Sep 2024 C1 U1 MPL-2.0 Yes Details →
v0.19.1-0.20240901003111-8dde8ee9edb7 01 Sep 2024 C1 U1 MPL-2.0 Yes Details →
v0.19.1-0.20240815175702-06e3819063ed 15 Aug 2024 C1 U1 MPL-2.0 Yes Details →
v0.19.1-0.20240815172314-d83ef0c6424a 15 Aug 2024 C1 U1 MPL-2.0 Yes Details →
v0.19.1-0.20240801002725-16f1fb511ddd 01 Aug 2024 C1 U1 MPL-2.0 Yes Details →
v0.19.1-0.20240725202923-b240a5ad808a 25 Jul 2024 C1 U1 MPL-2.0 Yes Details →
v0.19.1-0.20240701002737-de75fdcd2dbe 01 Jul 2024 C1 U1 MPL-2.0 Yes Details →
v0.19.1-0.20240601002454-ec8f9ef97465 01 Jun 2024 C1 U1 MPL-2.0 Yes Details →
v0.18.1-0.20240521202925-92f53315ef7b 21 May 2024 C1 U1 MPL-2.0 Yes Details →
v0.19.0 21 May 2024 C1 U1 MPL-2.0 Yes Details →
v0.18.1-0.20240509222559-8195e689c589 09 May 2024 C1 U1 MPL-2.0 Yes Details →
v0.18.1-0.20240501002427-32f9937d021a 01 May 2024 C1 U1 MPL-2.0 Yes Details →
v0.18.1-0.20240410155026-45cfcf8837e3 10 Apr 2024 C1 U1 MPL-2.0 Yes Details →
v0.18.1-0.20240401002435-d96444efa1ce 01 Apr 2024 C1 U1 MPL-2.0 Yes Details →
v0.18.1-0.20240301002449-c412ff948a1b 01 Mar 2024 C1 U1 MPL-2.0 Yes Details →
v0.0.0-20240201180014-187ca51b3db9 01 Feb 2024 C1 U1 MPL-2.0 Yes Details →
v0.17.1-0.20240201180014-187ca51b3db9 01 Feb 2024 C1 U1 MPL-2.0 Yes Details →
v0.18.0 01 Feb 2024 C1 U1 MPL-2.0 Yes Details →
v0.17.1-0.20240201002231-05de9e537d27 01 Feb 2024 C1 U1 MPL-2.0 Yes Details →
v0.17.1-0.20240131201811-197203938bdd 31 Jan 2024 C1 U1 MPL-2.0 Yes Details →
v0.17.1-0.20240131184107-2d74a4c46fb1 31 Jan 2024 C1 U1 MPL-2.0 Yes Details →
v0.17.1-0.20240131182221-8a72e73b871d 31 Jan 2024 C1 U1 MPL-2.0 Yes Details →
v0.6.6-0.20240124030247-c4f7b0b16ff0 24 Jan 2024 C1 U1 MPL-2.0 Yes Details →
v0.6.6-0.20240124025714-3fef3939b6da 24 Jan 2024 C1 U1 MPL-2.0 Yes Details →
v0.17.1-0.20240101002517-ac14bd5f324c 01 Jan 2024 C1 U1 MPL-2.0 Yes Details →
v0.17.1-0.20231201002439-f357c258f2db 01 Dec 2023 C1 U1 MPL-2.0 Yes Details →
v0.17.1-0.20231121223153-77c5fce32a7a 21 Nov 2023 C1 U1 MPL-2.0 Yes Details →
v0.17.1-0.20231101002222-95e76dd489fa 01 Nov 2023 C1 U1 MPL-2.0 Yes Details →
v0.17.1-0.20231001002409-01e6df21bf19 01 Oct 2023 C1 U1 MPL-2.0 Yes Details →
v0.16.1-0.20230901201424-bf81b93489c1 01 Sep 2023 C1 U1 MPL-2.0 Yes Details →
v0.17.0 01 Sep 2023 C1 U1 MPL-2.0 Yes Details →
v0.16.1-0.20230901171622-ea6632d378be 01 Sep 2023 C1 U1 MPL-2.0 Yes Details →
v0.16.1-0.20230901171509-248c7208c917 01 Sep 2023 C1 U1 MPL-2.0 Yes Details →
v0.16.1-0.20230901002232-968b9ec638e7 01 Sep 2023 C1 U1 MPL-2.0 Yes Details →
v0.16.1-0.20230801002630-6f434012bbfc 01 Aug 2023 C1 U1 MPL-2.0 Yes Details →
v0.16.1-0.20230725181515-aad01706e794 25 Jul 2023 C1 U1 MPL-2.0 Yes Details →
v0.16.1-0.20230721190705-d04080579dca 21 Jul 2023 C1 U1 MPL-2.0 Yes Details →
v0.16.0 26 May 2023 C1 U1 — Yes Details →
v0.6.6-0.20230525164619-99e1102c942b 25 May 2023 C1 U1 — Yes Details →
v0.6.6-0.20230503162424-5fa38660ead9 03 May 2023 C1 U1 — Yes Details →
v0.6.6-0.20230419174959-99624dac3980 19 Apr 2023 C1 U1 — Yes Details →
v0.6.6-0.20230321214316-c0d33a2d7bb8 21 Mar 2023 C1 U1 — Yes Details →
v0.6.6-0.20230301231856-8f1f009825b1 01 Mar 2023 C1 U1 — Yes Details →
v0.6.6-0.20230222220132-c2a4fe911612 22 Feb 2023 C1 U1 — Yes Details →
v0.6.6-0.20230207150710-6a31bf586b81 07 Feb 2023 C1 U1 — Yes Details →
v0.15.0 06 Feb 2023 C1 U1 — Yes Details →
v0.6.6-0.20230206215340-a3d5acf990a1 06 Feb 2023 C1 U1 — Yes Details →
v0.6.6-0.20230201185011-3658142e5b36 01 Feb 2023 C1 U1 — Yes Details →
v0.6.6-0.20230116151415-6df8090d5382 16 Jan 2023 C1 U1 — Yes Details →
v0.6.6-0.20230104001244-482be77ee812 04 Jan 2023 C1 U1 — Yes Details →
v0.6.6-0.20221223200955-0c555a08b914 23 Dec 2022 C1 U1 — Yes Details →
v0.6.6-0.20221219183253-5bc9f1fa91c3 19 Dec 2022 C1 U1 — Yes Details →
v0.6.6-0.20221215212958-18d1fa3756da 15 Dec 2022 C1 U1 — Yes Details →
v0.6.6-0.20221214150713-b1517845a107 14 Dec 2022 C1 U1 — Yes Details →
v0.12.2 23 Nov 2022 C1 U1 — Yes Details →
v0.13.2 23 Nov 2022 C1 U1 — Yes Details →
v0.14.1 23 Nov 2022 C1 U1 — Yes Details →

The newest 120 of 305 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2021 1
  • 2024 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/hashicorp/vault-plugin-secrets-gcp

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2020-12757: Improper Input Validation in HashiCorp Vault 9.8 critical 0.6.2 18 May 2021
CVE-2020-12757: Improper Input Validation in HashiCorp Vault Plugin Secrets GCP N/A unrated 0.6.2 21 Aug 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/hashicorp/vault-plugin-secrets-gcp

Is github.com/hashicorp/vault-plugin-secrets-gcp safe to use?

Vulert records 2 vulnerabilities for github.com/hashicorp/vault-plugin-secrets-gcp in Go: 1 critical, 0 high, 0 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/hashicorp/vault-plugin-secrets-gcp's Vulert package health score?

Vulert scores github.com/hashicorp/vault-plugin-secrets-gcp 70/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/hashicorp/vault-plugin-secrets-gcp affected?

Yes. v0.25.1, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does github.com/hashicorp/vault-plugin-secrets-gcp have?

2 vulnerabilities are recorded for github.com/hashicorp/vault-plugin-secrets-gcp in the Go ecosystem: 1 critical, 0 high, 0 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/hashicorp/vault-plugin-secrets-gcp vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/hashicorp/vault-plugin-secrets-gcp in the last 12 months, and the oldest entry in this database dates to 18 May 2021. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/hashicorp/vault-plugin-secrets-gcp are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/hashicorp/vault-plugin-secrets-gcp for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/hashicorp/vault-plugin-secrets-gcp version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.