Vulnerability Database · Go · Package report
github.com/jackc/puddle: vulnerability history, versions and safety
github.com/jackc/puddle is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/jackc/puddle v1.3.0 i
Updated on 23 Oct 2026
Good news: v1.3.0, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Unmaintained
- Popularity Niche
- Community Quiet
What to do: Stay on v1.3.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.3.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v1.3.0 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 426 i
- OpenSSF scorecard 2/10 i
- Last release 49 months ago i
- Licence MIT i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/jackc/puddle, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v1.3.0 27 Aug 2022
- v1.2.2-0.20220404125616-4e959849469a 04 Apr 2022
- v1.2.2-0.20220115000239-314357b79562 15 Jan 2022
- v1.2.1 03 Dec 2021
- v1.2.1-0.20211203000010-021a5cc1a6de 03 Dec 2021
- v1.2.1-0.20211203000010-69f945a21a9a 03 Dec 2021
- v1.2.1-0.20211203000010-8fac9a91a4d3 03 Dec 2021
- v1.2.1-0.20211203000010-ba6bef156386 03 Dec 2021
- v1.2.0 20 Nov 2021
- v1.1.5-0.20211113233929-4d33264d6333 13 Nov 2021
- v1.1.5-0.20211113105143-69a4c0293791 13 Nov 2021
- v1.1.5-0.20210925143318-0cff23235f9b 25 Sep 2021
- v1.1.4 11 Sep 2021
- v1.1.3 04 Dec 2020
- v0.0.0-20201005135919-8a2237ffa5d7 05 Oct 2020
- v1.1.3-0.20201005135919-8a2237ffa5d7 05 Oct 2020
- v1.1.3-0.20200928145301-a70fb082dfdb 28 Sep 2020
- v1.1.2 26 Sep 2020
- v1.1.2-0.20200821025810-91d0159cc97a 21 Aug 2020
- v1.1.2-0.20200821025647-6d0ef02e907e 21 Aug 2020
- v1.1.1 03 Apr 2020
- v1.1.1-0.20200403031013-2cd0ce3f9b2d 03 Apr 2020
- v1.1.0 05 Feb 2020
- v1.0.1-0.20200203142542-cde4bcb7af80 03 Feb 2020
- v1.0.1-0.20200203001449-4014e4825a5e 03 Feb 2020
- v1.0.1-0.20200126004755-807afe48a83d 26 Jan 2020
- v1.0.1-0.20200125230635-6897b9f0cd84 25 Jan 2020
- v1.0.1-0.20191216215842-26cd25c14be1 16 Dec 2019
- v0.0.0-20190608224051-11cab39313c9 08 Jun 2019
- v1.0.0 08 Jun 2019
- v0.0.0-20190413234325-e4ced69a3a2b 13 Apr 2019
- v0.0.0-20190413233908-0395a39c2d01 13 Apr 2019
- v0.0.0-20190409004018-0d93e0ec116a 09 Apr 2019
- v0.0.0-20181224181918-1396b8ec469a 24 Dec 2018
- v0.0.0-20181224032818-76b0c06b8b8d 24 Dec 2018
All 35 versions Vulert tracks for this package. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/jackc/puddle
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/jackc/puddle
Is github.com/jackc/puddle safe to use?
Vulert has no vulnerabilities on record for github.com/jackc/puddle in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/jackc/puddle's Vulert package health score?
Vulert scores github.com/jackc/puddle 50/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/jackc/puddle affected?
No. v1.3.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of github.com/jackc/puddle should I use?
v1.3.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does github.com/jackc/puddle have?
0 vulnerabilities are recorded for github.com/jackc/puddle in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/jackc/puddle vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/jackc/puddle in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/jackc/puddle are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/jackc/puddle for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/jackc/puddle version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.