Vulnerability Database · Go · Package report
github.com/notaryproject/notation-core-go: vulnerability history, versions and safety
github.com/notaryproject/notation-core-go is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
See all github.com/notaryproject/notation-core-go vulnerabilities
Vulert verdict on github.com/notaryproject/notation-core-go v1.3.0 i
Updated on 23 Oct 2026
Good news: v1.3.0, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Maintaining
- Popularity Little adoption
- Community Quiet
What to do: Stay on v1.3.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.3.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v1.3.0 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 14 i
- OpenSSF scorecard 5/10 i
- Last release 18 months ago i
- Licence Apache-2.0 i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/notaryproject/notation-core-go, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v1.3.1-0.20250701030804-a9c5e3f1a5b5 01 Jul 2025
- v1.3.1-0.20250508084941-ea9d2657dc6d 08 May 2025
- v1.2.1-0.20250416033923-ef8789627fc3 16 Apr 2025
- v1.3.0 16 Apr 2025
- v1.2.1-0.20250325094510-4d7353253409 25 Mar 2025
- v1.2.1-0.20250304022306-ea37e4e6c39a 04 Mar 2025
- v1.2.1-0.20250227025900-fcf45123a3fc 27 Feb 2025
- v1.2.1-0.20250221020025-441bbe882ab0 21 Feb 2025
- v1.2.1-0.20250121025818-751008360b50 21 Jan 2025
- v1.2.0 14 Jan 2025
- v1.2.0-rc.2.0.20250107013125-2bf73c7f7135 07 Jan 2025
- v1.2.0-rc.2.0.20241230005542-030abc293c71 30 Dec 2024
- v1.2.0-rc.1.0.20241206063534-2cd55de6f450 06 Dec 2024
- v1.2.0-rc.2 06 Dec 2024
- v1.2.0-rc.1.0.20241129024749-95d89543c9f9 29 Nov 2024
- v1.2.0-rc.1.0.20241127145933-ce88e0846658 27 Nov 2024
- v1.2.0-rc.1.0.20241113053942-f0b6f89f034c 13 Nov 2024
- v1.2.0-rc.1.0.20241112001243-33af15a18954 12 Nov 2024
- v1.2.0-rc.1.0.20241107071113-49a6aaa61af9 07 Nov 2024
- v0.0.0-20241105060949-9524e15b888c 05 Nov 2024
- v1.2.0-rc.1.0.20241011162203-3067ab1223fe 11 Oct 2024
- v1.1.1-0.20240924002459-e90546bd90a8 24 Sep 2024
- v1.2.0-rc.1 24 Sep 2024
- v1.1.1-0.20240920045731-0786f51de737 20 Sep 2024
- v1.1.1-0.20240920044235-5d9b2edc6a93 20 Sep 2024
- v1.1.1-0.20240918011623-695ea0c1ad1f 18 Sep 2024
- v1.1.0 27 Aug 2024
- v1.1.0-rc.1.0.20240827000648-55e356868754 27 Aug 2024
- v1.1.0-beta.1.0.20240808032014-453a5ebcbfdc 08 Aug 2024
- v1.1.0-rc.1 08 Aug 2024
- v1.1.0-beta.1.0.20240808015012-004b86dbf289 08 Aug 2024
- v1.1.0-beta.1.0.20240723012151-45dcf4693746 23 Jul 2024
- v1.0.4-0.20240716001320-f45197cbd53b 16 Jul 2024
- v1.1.0-beta.1 16 Jul 2024
- v1.0.4-0.20240708015912-faac9b7f3f10 08 Jul 2024
- v1.0.4-0.20240628014149-c85a3d9f6505 28 Jun 2024
- v1.0.3 22 May 2024
- v1.0.3-0.20240522165407-4211b09afe43 22 May 2024
- v1.0.3-0.20240426152202-6f8b75c6b01f 26 Apr 2024
- v1.0.3-0.20240325061945-807a3386734e 25 Mar 2024
- v1.0.3-0.20240321124141-9a2ff9ea5f08 21 Mar 2024
- v1.0.3-0.20240319031542-93218d92c134 19 Mar 2024
- v1.0.3-0.20240306175004-c71a5056699c 06 Mar 2024
- v1.0.3-0.20240222092706-f6d353ba92cb 22 Feb 2024
- v0.0.0-20240119033703-2bc927beb626 19 Jan 2024
- v1.0.2 19 Jan 2024
- v1.0.2-0.20240119033703-2bc927beb626 19 Jan 2024
- v0.0.0-20240114220738-d9131c7fec1b 14 Jan 2024
- v1.0.2-0.20240114220738-d9131c7fec1b 14 Jan 2024
- v0.0.0-20231226053710-90383555c1b9 26 Dec 2023
- v1.0.2-0.20231226053710-90383555c1b9 26 Dec 2023
- v1.0.2-0.20231219164818-bdbd23000c8a 19 Dec 2023
- v1.0.2-0.20231213014624-383d314fe751 13 Dec 2023
- v1.0.2-0.20231120235757-d957bed16d36 20 Nov 2023
- v1.0.2-0.20231108031513-96d9a6394637 08 Nov 2023
- v1.0.1 26 Oct 2023
- v1.0.1-0.20231011041735-3f28a1b9cc6d 11 Oct 2023
- v1.0.1-0.20230914221936-e20da31b7d26 14 Sep 2023
- v1.0.1-0.20230904062237-1373ab0d982d 04 Sep 2023
- v0.0.0-20230721092308-0c1ec3be33eb 21 Jul 2023
- v1.0.0 21 Jul 2023
- v0.0.0-20230626021014-02fc54ab4e50 26 Jun 2023
- v1.0.0-rc.4.0.20230626021014-02fc54ab4e50 26 Jun 2023
- v0.0.0-20230523022908-a0cb09ec2c1f 23 May 2023
- v1.0.0-rc.3.0.20230523022908-a0cb09ec2c1f 23 May 2023
- v1.0.0-rc.4 23 May 2023
- v0.0.0-20230421043933-4d6ef22973c5 21 Apr 2023
- v1.0.0-rc.2.0.20230421043933-4d6ef22973c5 21 Apr 2023
- v1.0.0-rc.3 21 Apr 2023
- v1.0.0-rc.2.0.20230420025358-cefe2efc755e 20 Apr 2023
- v0.0.0-20230405140227-010204d2d3f4 05 Apr 2023
- v1.0.0-rc.2.0.20230405140227-010204d2d3f4 05 Apr 2023
- v1.0.0-rc.2.0.20230322014039-beeb17a06a06 22 Mar 2023
- v1.0.0-rc.2.0.20230227053033-d336b6a8e953 27 Feb 2023
- v0.0.0-20230222011724-7117da98e442 22 Feb 2023
- v1.0.0-rc.2.0.20230222011724-7117da98e442 22 Feb 2023
- v0.0.0-20230216201542-038dfe8475c3 16 Feb 2023
- v1.0.0-rc.2.0.20230216201542-038dfe8475c3 16 Feb 2023
- v0.0.0-20230213144142-78f2ec9165c9 13 Feb 2023
- v1.0.0-rc.1.0.20230213144142-78f2ec9165c9 13 Feb 2023
- v1.0.0-rc.2 13 Feb 2023
- v0.0.0-20230202013027-0cb6e7508c67 02 Feb 2023
- v1.0.0-rc.1.0.20230202013027-0cb6e7508c67 02 Feb 2023
- v0.0.0-20230130103905-5ace66d47265 30 Jan 2023
- v0.0.0-20230120024621-a00bed938c67 20 Jan 2023
- v0.0.0-20221220003050-2e9833f56840 20 Dec 2022
- v1.0.0-rc.1.0.20221220003050-2e9833f56840 20 Dec 2022
- v0.2.0-beta.1.0.20221205183432-3022517b84c1 05 Dec 2022
- v1.0.0-rc.1 05 Dec 2022
- v0.0.0-20221123104522-9b5de089a023 23 Nov 2022
- v0.2.0-beta.1.0.20221123104522-9b5de089a023 23 Nov 2022
- v0.0.0-20221115181941-cd56ef60fb85 15 Nov 2022
- v0.2.0-beta.1.0.20221115181941-cd56ef60fb85 15 Nov 2022
- v0.0.0-20221107055150-99c1cc323b17 07 Nov 2022
- v0.2.0-beta.1.0.20221107055150-99c1cc323b17 07 Nov 2022
- v0.0.0-20221031114150-3033a42e145c 31 Oct 2022
- v0.1.0-alpha.4.0.20221031114150-3033a42e145c 31 Oct 2022
- v0.2.0-beta.1 31 Oct 2022
- v0.1.0-alpha.4.0.20221028010439-0e98fb144120 28 Oct 2022
- v0.1.0-alpha.4.0.20221017041709-56bd40a80d26 17 Oct 2022
- v0.1.0-alpha.3.0.20220929020818-b5df54c7465b 29 Sep 2022
- v0.1.0-alpha.4 29 Sep 2022
- v0.0.0-20220926064152-c65f5c6b3537 26 Sep 2022
- v0.0.0-20220926023941-e7aa03204754 26 Sep 2022
- v0.0.0-20220926022725-bd1d5a5c2e2a 26 Sep 2022
- v0.0.0-20220923044937-70115d5d5e51 23 Sep 2022
- v0.0.0-20220921054535-009c09a9628e 21 Sep 2022
- v0.1.0-alpha.3.0.20220921054535-009c09a9628e 21 Sep 2022
- v0.1.0-alpha.3.0.20220921042126-b9264de6f2c9 21 Sep 2022
- v0.1.0-alpha.3.0.20220921033415-f14510cf21c2 21 Sep 2022
- v0.1.0-alpha.3.0.20220921030644-9c1169a60d7d 21 Sep 2022
- v0.0.0-20220914093528-afc487400eec 14 Sep 2022
- v0.1.0-alpha.3.0.20220914065753-55b5b3970f90 14 Sep 2022
- v0.0.0-20220909042035-21758d70302a 09 Sep 2022
- v0.1.0-alpha.3.0.20220909042035-21758d70302a 09 Sep 2022
- v0.0.0-20220907034926-8cdaf86b4d7c 07 Sep 2022
- v0.0.0-20220907021043-25e180615917 07 Sep 2022
- v0.1.0-alpha.3.0.20220906042629-e92a26ac753e 06 Sep 2022
- v0.0.0-20220901064119-7bf2b3e37c06 01 Sep 2022
- v0.0.0-20220831054755-60059d52bd31 31 Aug 2022
The newest 120 of 160 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/notaryproject/notation-core-go
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/notaryproject/notation-core-go
Is github.com/notaryproject/notation-core-go safe to use?
Vulert has no vulnerabilities on record for github.com/notaryproject/notation-core-go in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/notaryproject/notation-core-go's Vulert package health score?
Vulert scores github.com/notaryproject/notation-core-go 63/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/notaryproject/notation-core-go affected?
No. v1.3.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of github.com/notaryproject/notation-core-go should I use?
v1.3.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does github.com/notaryproject/notation-core-go have?
0 vulnerabilities are recorded for github.com/notaryproject/notation-core-go in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/notaryproject/notation-core-go vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/notaryproject/notation-core-go in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/notaryproject/notation-core-go are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/notaryproject/notation-core-go for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/notaryproject/notation-core-go version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.