Vulnerability Database · Go · Package report
github.com/libp2p/go-libp2p-pubsub: vulnerability history, versions and safety
github.com/libp2p/go-libp2p-pubsub is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/libp2p/go-libp2p-pubsub v0.19.0 i
Updated on 23 Oct 2026
Good news: v0.19.0, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Sustainable
- Popularity Niche
- Community Quiet
What to do: Stay on v0.19.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.19.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v0.19.0 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 362 i
- OpenSSF scorecard 4/10 i
- Last release this month i
- Licence Apache-2.0 i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/libp2p/go-libp2p-pubsub, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v0.19.0 23 Oct 2026
- v0.17.1-0.20261008193949-01f2e9cb90ac 08 Oct 2026
- v0.17.1-0.20261008075034-30d6cf14e05c 08 Oct 2026
- v0.18.0 29 Sep 2026
- v0.17.1-0.20260729015212-eb94b22f78a2 29 Jul 2026
- v0.17.1-0.20260729004417-96ace106d3b3 29 Jul 2026
- v0.17.1-0.20260718025047-892d7aaf6b89 18 Jul 2026
- v0.0.0-20260709054452-9eb5e8a9f7c2 09 Jul 2026
- v0.17.0 09 Jul 2026
- v0.16.1-0.20260707102207-01917ab4bc72 07 Jul 2026
- v0.16.1-0.20260704214512-c8741e9a9522 04 Jul 2026
- v0.16.1-0.20260630191257-c5dab1f8e8fe 30 Jun 2026
- v0.0.0-20260611143718-41b11d5cb1a7 11 Jun 2026
- v0.16.1-0.20260611143718-41b11d5cb1a7 11 Jun 2026
- v0.16.1-0.20260601174525-2d1692eeac8b 01 Jun 2026
- v0.16.1-0.20260515125344-5ac7695ba01b 15 May 2026
- v0.16.1-0.20260511224928-998602bd8c7d 11 May 2026
- v0.0.0-20260502160743-e0e1ee53d420 02 May 2026
- v0.16.1-0.20260502160743-e0e1ee53d420 02 May 2026
- v0.16.0 23 Apr 2026
- v0.15.1-0.20260417202758-5cde33c38137 17 Apr 2026
- v0.15.1-0.20260415135522-b8d1f194d282 15 Apr 2026
- v0.15.1-0.20260406175952-4ef4514b7682 06 Apr 2026
- v0.15.1-0.20260406135139-845aee45d335 06 Apr 2026
- v0.15.1-0.20260326101350-8888c85294f6 26 Mar 2026
- v0.15.1-0.20260326065806-d2d2138af367 26 Mar 2026
- v0.15.1-0.20260326063738-7a0f610e97c2 26 Mar 2026
- v0.15.1-0.20260325131314-685cab558636 25 Mar 2026
- v0.15.1-0.20260323205426-352860be1181 23 Mar 2026
- v0.15.1-0.20260323200249-2aabbfb20556 23 Mar 2026
- v0.15.1-0.20260323112308-b36a51a8d395 23 Mar 2026
- v0.15.1-0.20260323101223-9a375d1e2be9 23 Mar 2026
- v0.15.1-0.20260320120515-60eca43868ef 20 Mar 2026
- v0.15.1-0.20260320112358-596c79721d76 20 Mar 2026
- v0.15.1-0.20260319210319-9a352bcf8925 19 Mar 2026
- v0.15.1-0.20260318204832-e68f522745e5 18 Mar 2026
- v0.15.1-0.20260318184623-12372d99a0bc 18 Mar 2026
- v0.15.1-0.20260312112909-43d58952e997 12 Mar 2026
- v0.15.1-0.20260312103126-1a808a214fd3 12 Mar 2026
- v0.15.1-0.20260312102607-5248db1c8406 12 Mar 2026
- v0.14.3-0.20260312033300-5f64fcb00d89 12 Mar 2026
- v0.15.1-0.20260305223556-a01777894f4c 05 Mar 2026
- v0.15.1-0.20260304214010-30edef80aae7 04 Mar 2026
- v0.15.1-0.20260303214020-36fb195ae90a 03 Mar 2026
- v0.15.1-0.20260228024316-9b514a57f00c 28 Feb 2026
- v0.15.1-0.20260227221250-46a8135c2bc5 27 Feb 2026
- v0.15.1-0.20260223193113-d27a11e2f395 23 Feb 2026
- v0.15.1-0.20260213084110-6965e0bb389f 13 Feb 2026
- v0.15.1-0.20260213050207-d8f500417dc9 13 Feb 2026
- v0.15.1-0.20260204134226-63d7d8e05d52 04 Feb 2026
- v0.15.1-0.20260203150236-415b1d0de51e 03 Feb 2026
- v0.15.1-0.20260131020609-30df1384d642 31 Jan 2026
- v0.15.1-0.20260130195232-3431a34bcbbf 30 Jan 2026
- v0.15.1-0.20260127225230-d9e98cd10cf3 27 Jan 2026
- v0.15.1-0.20260121174848-60c3de22f816 21 Jan 2026
- v0.15.1-0.20260114001317-c405cbfa23ff 14 Jan 2026
- v0.15.1-0.20260113030856-2db8ecf3587c 13 Jan 2026
- v0.15.1-0.20251209215459-e06825fbbc68 09 Dec 2025
- v0.15.1-0.20251208212037-50547ac45568 08 Dec 2025
- v0.15.1-0.20251208211858-3beb8278c253 08 Dec 2025
- v0.15.1-0.20251208210703-c317e62daf9c 08 Dec 2025
- v0.15.1-0.20251204211037-d78c4e225880 04 Dec 2025
- v0.15.1-0.20251204184942-8b920daaf136 04 Dec 2025
- v0.15.1-0.20251203173308-f689efab15a2 03 Dec 2025
- v0.15.1-0.20251203001257-2ce66e55422d 03 Dec 2025
- v0.15.1-0.20251114013250-ca33674ef866 14 Nov 2025
- v0.15.1-0.20251030172942-bc08cabf83b0 30 Oct 2025
- v0.14.4-0.20251029225604-4bca56e06bca 29 Oct 2025
- v0.15.1-0.20251028225931-beacd20791cd 28 Oct 2025
- v0.15.1-0.20251028224059-62e57fc2c8e8 28 Oct 2025
- v0.15.1-0.20251028222845-a56cb8bd58a1 28 Oct 2025
- v0.14.4-0.20251022182844-938b73c59852 22 Oct 2025
- v0.14.4-0.20251015023843-34e9bbaae96d 15 Oct 2025
- v0.14.4-0.20251014025721-9158d1c8b8f7 14 Oct 2025
- v0.14.4-0.20250930192224-4bec5400d65c 30 Sep 2025
- v0.14.4-0.20250925234347-91dd1a5e4596 25 Sep 2025
- v0.14.4-0.20250924192223-5297a51ffd50 24 Sep 2025
- v0.15.0 15 Sep 2025
- v0.14.4-0.20250915203200-4a558003ec4b 15 Sep 2025
- v0.0.0-20250912144656-189906328179 12 Sep 2025
- v0.14.3 10 Sep 2025
- v0.14.3-0.20250910220300-c014d897efe4 10 Sep 2025
- v0.14.3-0.20250905193243-d53e38b98dc2 05 Sep 2025
- v0.14.3-0.20250822000105-ab876fc71c34 22 Aug 2025
- v0.14.3-0.20250812213611-97ebfb90350a 12 Aug 2025
- v0.14.3-0.20250812213046-996ce03c32a1 12 Aug 2025
- v0.14.3-0.20250804221917-6a50510169e7 04 Aug 2025
- v0.14.3-0.20250804202622-185854498ac9 04 Aug 2025
- v0.14.3-0.20250804195905-61c8ad56f681 04 Aug 2025
- v0.14.3-0.20250804195700-6915208de5af 04 Aug 2025
- v0.14.3-0.20250804194655-4517250232d0 04 Aug 2025
- v0.14.3-0.20250804174624-2f870b290776 04 Aug 2025
- v0.14.3-0.20250801004845-13f1947eb9a8 01 Aug 2025
- v0.14.3-0.20250801003057-bfac0ca40986 01 Aug 2025
- v0.14.3-0.20250801000541-a2a40de08472 01 Aug 2025
- v0.14.3-0.20250717225504-7c5bebbd19a3 17 Jul 2025
- v0.14.3-0.20250717193858-00486a926fec 17 Jul 2025
- v0.14.3-0.20250715013052-7971d57a1ee9 15 Jul 2025
- v0.14.2 03 Jul 2025
- v0.14.1 25 Jun 2025
- v0.14.1-0.20250610174748-b9a9656c5eba 10 Jun 2025
- v0.14.0 29 May 2025
- v0.13.2-0.20250529053225-c405ca802806 29 May 2025
- v0.13.2-0.20250527160426-38ad16a6872e 27 May 2025
- v0.13.2-0.20250520000221-9e5145fb29c9 20 May 2025
- v0.13.2-0.20250508172302-0c5ee7bbfeb0 08 May 2025
- v0.0.0-20250430075850-50ccc5ca90cc 30 Apr 2025
- v0.13.1-0.20250430075850-50ccc5ca90cc 30 Apr 2025
- v0.13.2-0.20250430075850-50ccc5ca90cc 30 Apr 2025
- v0.13.2-0.20250415173554-a0e0a00f52ba 15 Apr 2025
- v0.11.1-0.20250401170829-4b39119d29dc 01 Apr 2025
- v0.11.1-0.20250331232351-5d42c3579a89 31 Mar 2025
- v0.13.2-0.20250328180504-95a070affb1e 28 Mar 2025
- v0.13.1 13 Mar 2025
- v0.13.1-0.20250313105939-68726389f2c0 13 Mar 2025
- v0.13.1-0.20250223223938-f486808fbed1 23 Feb 2025
- v0.13.1-0.20250218134146-b50197ee8bc7 18 Feb 2025
- v0.13.1-0.20250216213120-bfcc7c4889cd 16 Feb 2025
- v0.13.1-0.20250213011418-28a416373dac 13 Feb 2025
- v0.13.0 07 Feb 2025
The newest 120 of 446 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/libp2p/go-libp2p-pubsub
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/libp2p/go-libp2p-pubsub
Is github.com/libp2p/go-libp2p-pubsub safe to use?
Vulert has no vulnerabilities on record for github.com/libp2p/go-libp2p-pubsub in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/libp2p/go-libp2p-pubsub's Vulert package health score?
Vulert scores github.com/libp2p/go-libp2p-pubsub 77/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/libp2p/go-libp2p-pubsub affected?
No. v0.19.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
How many vulnerabilities does github.com/libp2p/go-libp2p-pubsub have?
0 vulnerabilities are recorded for github.com/libp2p/go-libp2p-pubsub in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/libp2p/go-libp2p-pubsub vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/libp2p/go-libp2p-pubsub in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/libp2p/go-libp2p-pubsub are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/libp2p/go-libp2p-pubsub for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/libp2p/go-libp2p-pubsub version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.