VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/kardianos/service: vulnerability history, versions and safety

github.com/kardianos/service is a package in the Go ecosystem. Vulert records 1 vulnerability for it across 120 releases, first recorded in Apr 2022. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
1 vulnerabilities recorded H1
i
1 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/kardianos/service vulnerabilities

Vulert verdict on github.com/kardianos/service v1.3.0 i

Updated on 23 Oct 2026

Careful: v1.3.0 has 1 known vulnerability, and 1 has no fix yet. Use an earlier safe version, or the workaround listed for each one.

Package health score 60/100
  • Security Some issues to review
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Quiet

The current release has a vulnerability with no published fix, which caps this score.

What to do: Pin an earlier, unaffected release if you can, and apply the workaround each vulnerability lists until a fix is published. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v1.3.0 — affected i
  • Vulnerabilities on record 1 over 1 year · 0 in the last year i
  • Latest disclosure 23 Apr 2022 i
  • Highest CVSS 7.8 i
  • With no published fix 1 i
  • Stars 4,852 i
  • OpenSSF scorecard 2/10 i
  • Last release 3 months ago i
  • Licence Zlib i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/kardianos/service, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.3.1-0.20260829131308-99070899946d 29 Aug 2026 H1 Zlib No Details →
v1.3.0 06 Jul 2026 H1 Zlib No Details →
v1.2.4 14 Jul 2025 H1 Zlib No Details →
v1.2.3 14 Jul 2025 H1 Zlib No Details →
v1.2.3-0.20250714153655-b8217ba78872 14 Jul 2025 H1 Zlib No Details →
v1.2.3-0.20250714152605-8de5087a7cff 14 Jul 2025 H1 Zlib No Details →
v0.0.0-20240613133416-becf2eb62b83 13 Jun 2024 H1 Zlib No Details →
v1.2.3-0.20240613133416-becf2eb62b83 13 Jun 2024 H1 Zlib No Details →
v1.2.3-0.20230225065522-804642397ef7 25 Feb 2023 H1 Zlib No Details →
v0.0.0-20230215200102-9832e01049dd 15 Feb 2023 H1 Zlib No Details →
v1.2.3-0.20230215200102-9832e01049dd 15 Feb 2023 H1 Zlib No Details →
v0.0.0-20221011121305-3596dfaf340d 11 Oct 2022 H1 Zlib No Details →
v1.2.1-0.20221011121305-3596dfaf340d 11 Oct 2022 H1 Zlib No Details →
v1.2.3-0.20221011121305-3596dfaf340d 11 Oct 2022 H1 Zlib No Details →
v0.0.0-20221010220222-f4a4df2b5eb5 10 Oct 2022 H1 Zlib No Details →
v1.2.2 10 Oct 2022 H1 Zlib No Details →
v0.0.0-20220428125717-29f8c79c511b 28 Apr 2022 H1 Zlib No Details →
v1.2.2-0.20220428125717-29f8c79c511b 28 Apr 2022 H1 Zlib No Details →
v1.2.2-0.20220428125617-abe98a927426 28 Apr 2022 H1 Zlib No Details →
v1.2.2-0.20220427121136-bc65850ac568 27 Apr 2022 H1 Zlib No Details →
v1.2.2-0.20220427121017-ff1da9655191 27 Apr 2022 H1 Zlib No Details →
v1.2.2-0.20220427120857-ed46af23122e 27 Apr 2022 H1 Zlib No Details →
v1.2.2-0.20220126151101-5c08916379a9 26 Jan 2022 H1 Zlib No Details →
v1.2.1 11 Nov 2021 H1 Zlib No Details →
v1.2.1-0.20211111172041-6fe2824ee824 11 Nov 2021 H1 Zlib No Details →
v1.2.1-0.20211104163826-b9d1d5b7279b 04 Nov 2021 H1 Zlib No Details →
v0.0.0-20210728001519-a323c3813bc7 28 Jul 2021 H1 Zlib No Details →
v1.1.1-0.20210728001519-a323c3813bc7 28 Jul 2021 H1 Zlib No Details →
v1.2.1-0.20210728001519-a323c3813bc7 28 Jul 2021 H1 Zlib No Details →
v0.0.0-20210616011951-36c9bf8c36a2 16 Jun 2021 H1 Zlib No Details →
v1.2.1-0.20210616011951-36c9bf8c36a2 16 Jun 2021 H1 Zlib No Details →
v1.2.1-0.20210615191825-5f1fed4906c5 15 Jun 2021 H1 Zlib No Details →
v1.2.1-0.20210610143642-a8dda22bcee9 10 Jun 2021 H1 Zlib No Details →
v1.2.1-0.20210610121116-17a2c7bcb56b 10 Jun 2021 H1 Zlib No Details →
v1.2.1-0.20210610120215-c7e6b82e87a1 10 Jun 2021 H1 Zlib No Details →
v1.2.1-0.20210610114949-8eb6809ed2e7 10 Jun 2021 H1 Zlib No Details →
v1.2.1-0.20210610114210-82b10ec284ff 10 Jun 2021 H1 Zlib No Details →
v1.2.1-0.20210610114054-3b7119afcd2d 10 Jun 2021 H1 Zlib No Details →
v0.0.0-20201211143537-ef35c563203c 11 Dec 2020 H1 Zlib No Details →
v1.0.1-0.20201211143537-ef35c563203c 11 Dec 2020 H1 Zlib No Details →
v1.2.1-0.20201211143537-ef35c563203c 11 Dec 2020 H1 Zlib No Details →
v1.2.0 17 Nov 2020 H1 Zlib No Details →
v1.1.1-0.20201116145805-41add7e3c933 16 Nov 2020 H1 Zlib No Details →
v1.1.1-0.20201116145505-258d7b252b5a 16 Nov 2020 H1 Zlib No Details →
v1.1.1-0.20201116145211-60dcbae4c507 16 Nov 2020 H1 Zlib No Details →
v1.1.1-0.20201116144717-a91b404a4f62 16 Nov 2020 H1 Zlib No Details →
v1.1.1-0.20201116144535-19f776cc5ffa 16 Nov 2020 H1 Zlib No Details →
v1.1.1-0.20201116144420-5dd9ac4ef7ad 16 Nov 2020 H1 Zlib No Details →
v1.1.1-0.20201027162819-7c688a995c3e 27 Oct 2020 H1 Zlib No Details →
v0.0.0-20200607185147-a1c091bc7f8b 07 Jun 2020 H1 Zlib No Details →
v1.1.0 07 Jun 2020 H1 Zlib No Details →
v1.0.1-0.20200607184339-f5ff0fc58524 07 Jun 2020 H1 Zlib No Details →
v1.0.1-0.20200607183912-f6135ae0e8d9 07 Jun 2020 H1 Zlib No Details →
v1.0.1-0.20200607183408-ec63d01a8de2 07 Jun 2020 H1 Zlib No Details →
v1.0.1-0.20200607182844-14b2cc59a290 07 Jun 2020 H1 Zlib No Details →
v1.0.1-0.20200607182457-6fb11709cd93 07 Jun 2020 H1 Zlib No Details →
v1.0.1-0.20200607181448-15406c80f4c3 07 Jun 2020 H1 Zlib No Details →
v1.0.1-0.20200607180618-095e475882fd 07 Jun 2020 H1 Zlib No Details →
v1.0.1-0.20200607180104-5544762d3edc 07 Jun 2020 H1 Zlib No Details →
v1.0.1-0.20200607174629-2ce04d92a6c3 07 Jun 2020 H1 Zlib No Details →
v1.0.1-0.20200607173636-5ab104476c17 07 Jun 2020 H1 Zlib No Details →
v0.0.0-20191211031725-3c356ae54c8a 11 Dec 2019 H1 Zlib No Details →
v1.0.1-0.20191211031725-3c356ae54c8a 11 Dec 2019 H1 Zlib No Details →
v1.0.1-0.20191211031415-7c2e4f75a458 11 Dec 2019 H1 Zlib No Details →
v1.0.1-0.20191211031241-6b582019e838 11 Dec 2019 H1 Zlib No Details →
v0.0.0-20191017145738-4df36c9fc1c6 17 Oct 2019 H1 Zlib No Details →
v1.0.1-0.20191017145738-4df36c9fc1c6 17 Oct 2019 H1 Zlib No Details →
v1.0.1-0.20191017145641-28e7e9edbbcf 17 Oct 2019 H1 Zlib No Details →
v0.0.0-20190514155156-fffe6c52ed0f 14 May 2019 H1 Zlib No Details →
v1.0.1-0.20190514155156-fffe6c52ed0f 14 May 2019 H1 Zlib No Details →
v1.0.1-0.20190514153639-61d6d0190173 14 May 2019 H1 Zlib No Details →
v0.0.0-20190326161025-0e5bec1b9eec 26 Mar 2019 H1 Zlib No Details →
v1.0.1-0.20190326161025-0e5bec1b9eec 26 Mar 2019 H1 Zlib No Details →
v0.0.0-20190208172924-56787a3ea05e 08 Feb 2019 H1 Zlib No Details →
v1.0.0 08 Feb 2019 H1 Zlib No Details →
v0.0.0-20181115005516-4c239ee84e7b 15 Nov 2018 H1 Zlib No Details →
v0.0.0-20180910224244-b1866cf76903 10 Sep 2018 H1 Zlib No Details →
v0.0.0-20180910221754-2b860c2dd7d6 10 Sep 2018 H1 Zlib No Details →
v0.0.0-20180907074259-73cafb2ed3d7 07 Sep 2018 H1 Zlib No Details →
v0.0.0-20180823001510-8f267d80f2eb 23 Aug 2018 H1 Zlib No Details →
v0.0.0-20180822180501-45244176fc18 22 Aug 2018 H1 Zlib No Details →
v0.0.0-20180821161327-4cdeddd6f419 21 Aug 2018 H1 Zlib No Details →
v0.0.0-20180821161327-4f2cc0069202 21 Aug 2018 H1 Zlib No Details →
v0.0.0-20180821161327-e5178e50d2cc 21 Aug 2018 H1 Zlib No Details →
v0.0.0-20180821044552-994866c14a5d 21 Aug 2018 H1 Zlib No Details →
v0.0.0-20180821044514-3bfa85e2d7ad 21 Aug 2018 H1 Zlib No Details →
v0.0.0-20180820184420-1166804cbc51 20 Aug 2018 H1 Zlib No Details →
v0.0.0-20180820184420-18492ae499b2 20 Aug 2018 H1 Zlib No Details →
v0.0.0-20180820184420-46447978a4be 20 Aug 2018 H1 Zlib No Details →
v0.0.0-20180820184420-d1814f7d3383 20 Aug 2018 H1 Zlib No Details →
v0.0.0-20180320115954-615a14ed7509 20 Mar 2018 H1 Zlib No Details →
v0.0.0-20180302231109-0ab6efe2ea51 02 Mar 2018 H1 Zlib No Details →
v0.0.0-20180302210706-1dd765d04514 02 Mar 2018 H1 Zlib No Details →
v0.0.0-20180104172756-89346fbadecf 04 Jan 2018 H1 Zlib No Details →
v0.0.0-20171117070538-14a49b39b37b 17 Nov 2017 H1 Zlib No Details →
v0.0.0-20170926164704-f53685ef760d 26 Sep 2017 H1 Zlib No Details →
v0.0.0-20170510194035-f6635a45ecce 10 May 2017 H1 Zlib No Details →
v0.0.0-20170510121522-a37cd5efa8d2 10 May 2017 H1 Zlib No Details →
v0.0.0-20170403185249-e173e96a4ea4 03 Apr 2017 H1 Zlib No Details →
v0.0.0-20170207192559-ef06f2f890aa 07 Feb 2017 H1 Zlib No Details →
v0.0.0-20161119210648-6d3a0ee7d342 19 Nov 2016 H1 — No Details →
v0.0.0-20161108191729-bd219ce2c8f6 08 Nov 2016 H1 — No Details →
v0.0.0-20161104002935-6a55aece86cb 04 Nov 2016 H1 — No Details →
v0.0.0-20161103173319-03b7b20ce7aa 03 Nov 2016 H1 — No Details →
v0.0.0-20160824000317-7a88211485df 24 Aug 2016 H1 — No Details →
v0.0.0-20160822184512-6636ccb00f9d 22 Aug 2016 H1 — No Details →
v0.0.0-20160822155610-ca5fc5f6dcec 22 Aug 2016 H1 — No Details →
v0.0.0-20160819224540-58e40a0bfadc 19 Aug 2016 H1 — No Details →
v0.0.0-20160713133237-5e335590050d 13 Jul 2016 H1 — No Details →
v0.0.0-20160712044652-9ea6d25b4556 12 Jul 2016 H1 — No Details →
v0.0.0-20160712044516-57c4b2b5721f 12 Jul 2016 H1 — No Details →
v0.0.0-20160709070443-ced353941e2a 09 Jul 2016 H1 — No Details →
v0.0.0-20160708171907-25cec2c07652 08 Jul 2016 H1 — No Details →
v0.0.0-20160708053011-1364d3816f0d 08 Jul 2016 H1 — No Details →
v0.0.0-20160301172323-d97d87340b4a 01 Mar 2016 H1 — No Details →
v0.0.0-20160301002748-e60f1d2d4eac 01 Mar 2016 H1 — No Details →
v0.0.0-20160208215912-2dbca8fa3bfe 08 Feb 2016 H1 — No Details →
v0.0.0-20160205174850-5f98fcd9ec2f 05 Feb 2016 H1 — No Details →
v0.0.0-20151022161119-2954cfdd7b0c 22 Oct 2015 H1 — No Details →
v0.0.0-20151021231548-86948c68a78a 21 Oct 2015 H1 — No Details →

The newest 120 of 233 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 1 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/kardianos/service

The 1 most severe of 1 vulnerabilities recorded for this package

Search all 1 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2022-29583: OS Command injection in github.com/kardianos/service 7.8 high No fix published 23 Apr 2022

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/kardianos/service

Is github.com/kardianos/service safe to use?

Vulert records 1 vulnerabilities for github.com/kardianos/service in Go: 0 critical, 1 high, 0 medium and 0 low. 1 of them has no published fix yet, so that is the one to avoid or mitigate.

What is github.com/kardianos/service's Vulert package health score?

Vulert scores github.com/kardianos/service 60/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15). The current release has a vulnerability with no published fix, which caps this score.

Is the latest version of github.com/kardianos/service affected?

Yes. v1.3.0, the version you would install today, has 1 known vulnerability, and 1 has no published fix yet. Use an earlier unaffected release, or the workaround each vulnerability lists.

Which version of github.com/kardianos/service should I use?

v1.3.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/kardianos/service have?

1 vulnerability is recorded for github.com/kardianos/service in the Go ecosystem: 0 critical, 1 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/kardianos/service vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/kardianos/service in the last 12 months, and the oldest entry in this database dates to 23 Apr 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/kardianos/service are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/kardianos/service for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/kardianos/service version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.