Vulnerability Database · Go · Package report

github.com/Masterminds/sprig: vulnerability history, versions and safety

github.com/Masterminds/sprig is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

Vulert verdict on github.com/Masterminds/sprig v2.22.0+incompatible i

Updated on 23 Oct 2026

Good news: v2.22.0+incompatible, the version you would install today, has no known vulnerabilities.

Package health score 62/100
  • Security Minor issues
  • Maintenance Unmaintained
  • Popularity Key ecosystem project
  • Community Quiet

What to do: Stay on v2.22.0+incompatible or newer. This can change: a vulnerability disclosed tomorrow can affect v2.22.0+incompatible too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v2.22.0+incompatible — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 4,751 i
  • OpenSSF scorecard 3/10 i
  • Last release 84 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/Masterminds/sprig, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20191002150024-e4c0945838d5 02 Oct 2019 none MIT — Details →
v2.22.0+incompatible 02 Oct 2019 none MIT — Details →
v0.0.0-20190918154147-7319d71329a3 18 Sep 2019 none MIT — Details →
v2.21.1-0.20190918154147-7319d71329a3+incompatible 18 Sep 2019 none MIT — Details →
v0.0.0-20190918153123-2691a9cba2ad 18 Sep 2019 none MIT — Details →
v2.21.0+incompatible 18 Sep 2019 none MIT — Details →
v2.20.1-0.20190917152310-ac14fb280b03+incompatible 17 Sep 2019 none MIT — Details →
v2.20.1-0.20190910161210-385f7602702f+incompatible 10 Sep 2019 none MIT — Details →
v2.20.1-0.20190910154559-292878893590+incompatible 10 Sep 2019 none MIT — Details →
v0.0.0-20190903161141-6f509977777c 03 Sep 2019 none MIT — Details →
v2.20.1-0.20190903161141-6f509977777c+incompatible 03 Sep 2019 none MIT — Details →
v2.20.1-0.20190828233027-ddcd520ce563+incompatible 28 Aug 2019 none MIT — Details →
v2.20.1-0.20190725183205-7525b3376b87+incompatible 25 Jul 2019 none MIT — Details →
v2.20.1-0.20190725183130-1070009ed0be+incompatible 25 Jul 2019 none MIT — Details →
v2.20.1-0.20190708204658-e22846bc09e7+incompatible 08 Jul 2019 none MIT — Details →
v2.20.1-0.20190618155836-8e5f7788fea6+incompatible 18 Jun 2019 none MIT — Details →
v0.0.0-20190618155440-258b00ffa731 18 Jun 2019 none MIT — Details →
v2.20.0+incompatible 18 Jun 2019 none MIT — Details →
v2.19.1-0.20190614140327-3120ff8915fc+incompatible 14 Jun 2019 none MIT — Details →
v2.19.1-0.20190603155123-1db0dfb2350b+incompatible 03 Jun 2019 none MIT — Details →
v0.0.0-20190425143610-2625cd487a68 25 Apr 2019 none MIT — Details →
v2.19.1-0.20190425143610-2625cd487a68+incompatible 25 Apr 2019 none MIT — Details →
v2.19.1-0.20190329151541-7f6489dfa4fa+incompatible 29 Mar 2019 none MIT — Details →
v2.19.1-0.20190302073118-d0adb2b807ea+incompatible 02 Mar 2019 none MIT — Details →
v0.0.0-20190301161902-9f8fceff796f 01 Mar 2019 none MIT — Details →
v2.18.1-0.20190301161902-9f8fceff796f+incompatible 01 Mar 2019 none MIT — Details →
v2.19.0+incompatible 01 Mar 2019 none MIT — Details →
v2.18.1-0.20190213224149-35fb796e3ed3+incompatible 13 Feb 2019 none MIT — Details →
v0.0.0-20190212194655-b1fe2752accc 12 Feb 2019 none MIT — Details →
v2.18.0+incompatible 12 Feb 2019 none MIT — Details →
v2.17.2-0.20190202035725-9c108854bc36+incompatible 02 Feb 2019 none MIT — Details →
v2.17.2-0.20190121122006-4b871e6ee253+incompatible 21 Jan 2019 none MIT — Details →
v2.17.2-0.20190104043133-01893d2f350f+incompatible 04 Jan 2019 none MIT — Details →
v0.0.0-20190103231513-544a9b1d90f3 03 Jan 2019 none MIT — Details →
v2.17.1+incompatible 03 Jan 2019 none MIT — Details →
v2.17.0+incompatible 03 Jan 2019 none MIT — Details →
v2.16.1-0.20181218061716-2b2ec8fad082+incompatible 18 Dec 2018 none MIT — Details →
v2.16.1-0.20181215231930-63ba06afbdfa+incompatible 15 Dec 2018 none MIT — Details →
v2.16.1-0.20181212213027-877c54268c34+incompatible 12 Dec 2018 none MIT — Details →
v0.0.0-20181119200632-3af02e5631fd 19 Nov 2018 none MIT — Details →
v2.16.1-0.20181119200632-3af02e5631fd+incompatible 19 Nov 2018 none MIT — Details →
v2.16.1-0.20181116194551-6908fc2d99d9+incompatible 16 Nov 2018 none MIT — Details →
v2.16.1-0.20181107163913-02c4557fb64b+incompatible 07 Nov 2018 none MIT — Details →
v2.16.1-0.20181102195643-ca331a1b2766+incompatible 02 Nov 2018 none MIT — Details →
v2.16.1-0.20181024112935-9e9064ae455d+incompatible 24 Oct 2018 none MIT — Details →
v2.16.1-0.20181010134323-e3f2a8519b45+incompatible 10 Oct 2018 none MIT — Details →
v2.16.1-0.20180926172334-dc424f950a9a+incompatible 26 Sep 2018 none MIT — Details →
v0.0.0-20180914001342-15f9564e7e9c 14 Sep 2018 none MIT — Details →
v2.16.0+incompatible 14 Sep 2018 none MIT — Details →
v2.15.1-0.20180913000119-49df8097cae9+incompatible 13 Sep 2018 none MIT — Details →
v0.0.0-20180725212158-77bb58b7f5e1 25 Jul 2018 none MIT — Details →
v2.15.1-0.20180725212158-77bb58b7f5e1+incompatible 25 Jul 2018 none MIT — Details →
v2.15.1-0.20180725211957-554468e6c60e+incompatible 25 Jul 2018 none MIT — Details →
v2.15.1-0.20180711165111-fccb0b0b31da+incompatible 11 Jul 2018 none MIT — Details →
v2.15.1-0.20180625124237-df393122472a+incompatible 25 Jun 2018 none MIT — Details →
v2.15.1-0.20180620152022-58342415b5b5+incompatible 20 Jun 2018 none MIT — Details →
v0.0.0-20180601091043-ae38335fd3a5 01 Jun 2018 none MIT — Details →
v2.15.1-0.20180601091043-ae38335fd3a5+incompatible 01 Jun 2018 none MIT — Details →
v2.15.1-0.20180526064358-7779e0d58432+incompatible 26 May 2018 none MIT — Details →
v2.15.1-0.20180525092406-df28ca70c236+incompatible 25 May 2018 none MIT — Details →
v2.15.1-0.20180430175525-a3bdffd00c74+incompatible 30 Apr 2018 none MIT — Details →
v0.0.0-20180403013413-6b2a58267f6a 03 Apr 2018 none MIT — Details →
v2.15.0+incompatible 03 Apr 2018 none MIT — Details →
v2.14.2-0.20180402211230-c9240e1a8007+incompatible 02 Apr 2018 none MIT — Details →
v2.14.2-0.20180329113917-68be25c0a9f4+incompatible 29 Mar 2018 none MIT — Details →
v2.14.2-0.20180328191558-624da102fad0+incompatible 28 Mar 2018 none MIT — Details →
v2.14.2-0.20180328190829-0822ad5f6ec5+incompatible 28 Mar 2018 none MIT — Details →
v2.14.2-0.20180328180527-587bca36f372+incompatible 28 Mar 2018 none MIT — Details →
v2.14.2-0.20180325111425-dd2d43e18291+incompatible 25 Mar 2018 none MIT — Details →
v2.14.2-0.20180201093732-7304b8496c37+incompatible 01 Feb 2018 none MIT — Details →
v2.14.2-0.20180116182543-2831a0bc8303+incompatible 16 Jan 2018 none MIT — Details →
v0.0.0-20171220185702-9d9aa1f74c86 20 Dec 2017 none MIT — Details →
v2.14.2-0.20171220185702-9d9aa1f74c86+incompatible 20 Dec 2017 none MIT — Details →
v2.14.2-0.20171213194432-8b17111292c8+incompatible 13 Dec 2017 none MIT — Details →
v2.14.2-0.20171213193123-ecbec66c2936+incompatible 13 Dec 2017 none MIT — Details →
v0.0.0-20171201200651-b217b9c388de 01 Dec 2017 none MIT — Details →
v2.14.1+incompatible 01 Dec 2017 none MIT — Details →
v2.14.1-0.20171201195734-aaf0119a29fb+incompatible 01 Dec 2017 none MIT — Details →
v2.14.1-0.20171127212536-7f79182d06d9+incompatible 27 Nov 2017 none MIT — Details →
v0.0.0-20171013182209-82f6f19d47b4 13 Oct 2017 none MIT — Details →
v2.14.1-0.20171013182209-82f6f19d47b4+incompatible 13 Oct 2017 none MIT — Details →
v0.0.0-20171006145504-efda631a76d7 06 Oct 2017 none MIT — Details →
v2.14.0+incompatible 06 Oct 2017 none MIT — Details →
v2.13.1-0.20171005235240-9641f524616f+incompatible 05 Oct 2017 none MIT — Details →
v2.13.0+incompatible 07 Sep 2017 none MIT — Details →
v0.0.0-20170907182638-782a01164d2c 07 Sep 2017 none MIT — Details →
v0.0.0-20170905183514-175e43701302 05 Sep 2017 none MIT — Details →
v0.0.0-20170807154050-a15b65d2b9b6 07 Aug 2017 none MIT — Details →
v0.0.0-20170526134439-e039e20e500c 26 May 2017 none MIT — Details →
v0.0.0-20170526024411-32180d9bfa4a 26 May 2017 none MIT — Details →
v0.0.0-20170517184213-2f4371ac162f 17 May 2017 none MIT — Details →
v0.0.0-20170516202909-9526be0327b2 16 May 2017 none MIT — Details →
v0.0.0-20170516191913-06706f6cd279 16 May 2017 none MIT — Details →
v0.0.0-20170513172856-4776d725fbd3 13 May 2017 none MIT — Details →
v0.0.0-20170502220117-f5b0ed4a680a 02 May 2017 none MIT — Details →
v0.0.0-20170502182306-a48f46e0125c 02 May 2017 none MIT — Details →
v0.0.0-20170502182047-083b5b5468b7 02 May 2017 none MIT — Details →
v0.0.0-20170407153254-4fd5bcb33f76 07 Apr 2017 none MIT — Details →
v0.0.0-20170404194836-dba49a8d3a46 04 Apr 2017 none MIT — Details →
v0.0.0-20170404074335-43114207719c 04 Apr 2017 none MIT — Details →
v0.0.0-20170320150037-348ae61066e3 20 Mar 2017 none — — Details →
v0.0.0-20170315180732-23597e5f6ad0 15 Mar 2017 none — — Details →
v0.0.0-20170313210725-10f3ff00763f 13 Mar 2017 none — — Details →
v0.0.0-20170310004610-427e90187e09 10 Mar 2017 none — — Details →
v0.0.0-20170309025658-2009c2546db6 09 Mar 2017 none — — Details →
v0.0.0-20170307010025-713da5382fb1 07 Mar 2017 none — — Details →
v0.0.0-20170223161724-2d2df7bd8bda 23 Feb 2017 none — — Details →
v0.0.0-20170222080551-99c74e461180 22 Feb 2017 none — — Details →
v0.0.0-20170217221210-4cebf9354aaa 17 Feb 2017 none — — Details →
v0.0.0-20170130193058-c974324bb59b 30 Jan 2017 none — — Details →
v0.0.0-20170130022526-b2207193a856 30 Jan 2017 none — — Details →
v0.0.0-20161214224719-69011c0cd9b4 14 Dec 2016 none — — Details →
v0.0.0-20161213235802-81fa7a54970a 13 Dec 2016 none — — Details →
v0.0.0-20161202003004-1e60e4ce482a 02 Dec 2016 none — — Details →
v0.0.0-20161202002238-01e75a65769c 02 Dec 2016 none — — Details →
v0.0.0-20161115202551-ff6305605b31 15 Nov 2016 none — — Details →
v0.0.0-20161110183506-3fb136ad254d 10 Nov 2016 none — — Details →
v0.0.0-20161104224108-23e92495c8aa 04 Nov 2016 none — — Details →
v0.0.0-20160930183708-8f797f5b2311 30 Sep 2016 none — — Details →
v0.0.0-20160819181142-89eb69842599 19 Aug 2016 none — — Details →

The newest 120 of 147 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/Masterminds/sprig

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/Masterminds/sprig

Is github.com/Masterminds/sprig safe to use?

Vulert has no vulnerabilities on record for github.com/Masterminds/sprig in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/Masterminds/sprig's Vulert package health score?

Vulert scores github.com/Masterminds/sprig 62/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/Masterminds/sprig affected?

No. v2.22.0+incompatible, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of github.com/Masterminds/sprig should I use?

v2.22.0+incompatible is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/Masterminds/sprig have?

0 vulnerabilities are recorded for github.com/Masterminds/sprig in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/Masterminds/sprig vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/Masterminds/sprig in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/Masterminds/sprig are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/Masterminds/sprig for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/Masterminds/sprig version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.