Vulnerability Database · Go · Package report
github.com/lestrrat-go/httprc: vulnerability history, versions and safety
github.com/lestrrat-go/httprc is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/lestrrat-go/httprc v1.0.6 i
Updated on 23 Oct 2026
Good news: v1.0.6, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Slowing
- Popularity Little adoption
- Community Inactive
What to do: Stay on v1.0.6 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.0.6 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v1.0.6 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 20 i
- OpenSSF scorecard 3/10 i
- Last release 27 months ago i
- Licence MIT i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/lestrrat-go/httprc, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v1.0.7-0.20240713224529-4c08cf2f6dee 13 Jul 2024
- v1.0.7-0.20240712211019-68b518646274 12 Jul 2024
- v1.0.6 12 Jul 2024
- v1.0.5 06 Mar 2024
- v1.0.5-0.20240302094357-e73952d36956 02 Mar 2024
- v1.0.5-0.20240219000309-48f90ef8ef2e 19 Feb 2024
- v1.0.5-0.20240131091448-aad5229b754e 31 Jan 2024
- v1.0.5-0.20221012112405-bfca88e127f3 12 Oct 2022
- v1.0.5-0.20221012112035-195742c59323 12 Oct 2022
- v1.0.4 19 Jul 2022
- v1.0.3 19 Jul 2022
- v1.0.2 13 Jun 2022
- v1.0.1 29 Mar 2022
- v1.0.0 29 Mar 2022
- v0.0.0-20220329042352-2d72ef4808c3 29 Mar 2022
- v0.0.0-20220323131307-4df5b5dfd26a 23 Mar 2022
- v0.0.0-20220323123836-b3cb3dfbebac 23 Mar 2022
- v0.0.0-20220323115436-e08b8c5cf805 23 Mar 2022
- v0.0.0-20220323115430-20c0b30ffeeb 23 Mar 2022
- v0.0.0-20220323101112-f6e42182c21c 23 Mar 2022
- v0.0.0-20220323064633-386a954d7dc5 23 Mar 2022
- v0.0.0-20220323064139-b71170785018 23 Mar 2022
- v0.0.0-20220323023317-cfa1a7e62aba 23 Mar 2022
- v0.0.0-20220323000856-476de1263b26 23 Mar 2022
- v0.0.0-20220322235145-800f7269d305 22 Mar 2022
- v0.0.0-20220322234823-2a1e60a22809 22 Mar 2022
- v0.0.0-20220322120543-838d3eca302d 22 Mar 2022
- v0.0.0-20220322060853-b33fb199564d 22 Mar 2022
- v0.0.0-20220322054427-d6c890de1c4f 22 Mar 2022
- v0.0.0-20220322053526-59ae0762b362 22 Mar 2022
- v0.0.0-20220322044207-b51125802cfb 22 Mar 2022
- v0.0.0-20220322043231-0f831ab8e747 22 Mar 2022
- v0.0.0-20220322021512-c76388308e54 22 Mar 2022
- v0.0.0-20220322015350-1ae122f0469e 22 Mar 2022
- v0.0.0-20220322004802-4da243506168 22 Mar 2022
- v0.0.0-20220322002758-bfaf50b3719f 22 Mar 2022
- v0.0.0-20220321065341-086121d8315d 21 Mar 2022
- v0.0.0-20220320121431-87927ca92c23 20 Mar 2022
All 38 versions Vulert tracks for this package. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/lestrrat-go/httprc
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/lestrrat-go/httprc
Is github.com/lestrrat-go/httprc safe to use?
Vulert has no vulnerabilities on record for github.com/lestrrat-go/httprc in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/lestrrat-go/httprc's Vulert package health score?
Vulert scores github.com/lestrrat-go/httprc 52/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/lestrrat-go/httprc affected?
No. v1.0.6, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of github.com/lestrrat-go/httprc should I use?
v1.0.6 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does github.com/lestrrat-go/httprc have?
0 vulnerabilities are recorded for github.com/lestrrat-go/httprc in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/lestrrat-go/httprc vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/lestrrat-go/httprc in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/lestrrat-go/httprc are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/lestrrat-go/httprc for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/lestrrat-go/httprc version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.