VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/opencontainers/umoci: vulnerability history, versions and safety

github.com/opencontainers/umoci is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from Feb 2022 to Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded M1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/opencontainers/umoci vulnerabilities

Vulert verdict on github.com/opencontainers/umoci v0.6.0 i

Updated on 23 Oct 2026

Action needed: v0.6.0 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 83/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Widely used
  • Community Moderate

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.6.0 — affected i
  • Vulnerabilities on record 2 over 2 years · 0 in the last year i
  • Latest disclosure 21 Aug 2024 i
  • Highest CVSS 5.5 i
  • With no published fix 0 i
  • Stars 967 i
  • OpenSSF scorecard 6/10 i
  • Last release 12 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/opencontainers/umoci, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.6.1-0.20260315131000-f5d1219acaf6 15 Mar 2026 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20260305060406-6e4e0aaa1caf 05 Mar 2026 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20260110132243-2abf0e66c3eb 10 Jan 2026 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20260110101421-28fd75cb0e29 10 Jan 2026 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251227141953-4e04bc507243 27 Dec 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251221115419-8069b96b1234 21 Dec 2025 M1 U1 Apache-2.0 Yes Details →
v0.0.0-20251213054154-70fc5ee1f4df 13 Dec 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251213054154-70fc5ee1f4df 13 Dec 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251209114903-d55a80471c11 09 Dec 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251111195028-5c1a29e54469 11 Nov 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251111052518-3e0f59e18d28 11 Nov 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251110061129-607c29541ca4 10 Nov 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251105070021-a0b653cf0840 05 Nov 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251103062732-ac85339a8ccb 03 Nov 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251031102227-13c7ab54c4f6 31 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251026095725-94413883fcdb 26 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251024012326-f404574b38b6 24 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251016141358-d6313283c365 16 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.1-0.20251015090152-8d053d66820a 15 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v0.6.0 15 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v0.5.2-0.20251004041049-bce0b0201077 04 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v0.5.2-0.20250912052559-f7489af32370 12 Sep 2025 M1 U1 Apache-2.0 Yes Details →
v0.5.2-0.20250906175908-95052c634377 06 Sep 2025 M1 U1 Apache-2.0 Yes Details →
v0.5.1 06 Sep 2025 M1 U1 Apache-2.0 Yes Details →
v0.5.1-0.20250530052646-8a7f7894daa4 30 May 2025 M1 U1 Apache-2.0 Yes Details →
v0.5.1-0.20250521070104-9e77a0c13b65 21 May 2025 M1 U1 Apache-2.0 Yes Details →
v0.5.0 21 May 2025 M1 U1 Apache-2.0 Yes Details →
v0.0.0-20250520043540-fbe9b0e2f2ae 20 May 2025 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20250520043540-fbe9b0e2f2ae 20 May 2025 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20250507132620-0c0dc790a0c9 07 May 2025 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20250411143901-55189f86c4d8 11 Apr 2025 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20241129064525-8f807a317985 29 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20241128103930-cddb884c964b 28 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20241128021600-3974679718aa 28 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20241127143056-d2ba031d16e7 27 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v0.1.1-0.20240909121406-afceb4b039de 09 Sep 2024 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20240909121406-afceb4b039de 09 Sep 2024 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20240708134804-ff684ba24c86 08 Jul 2024 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20240705070953-f118e398a535 05 Jul 2024 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20240508124516-656e4836fb0d 08 May 2024 M1 U1 Apache-2.0 Yes Details →
v0.4.7-0.20240306125805-0a7d3ec87077 06 Mar 2024 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20240306125805-0a7d3ec87077 06 Mar 2024 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20240222142725-c0fdcb5e2918 22 Feb 2024 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20240124010538-909d14011b85 24 Jan 2024 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20240105082514-a822fe066471 05 Jan 2024 M1 U1 Apache-2.0 Yes Details →
v0.0.0-20231019203336-7b9470be3b70 19 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20231019203336-7b9470be3b70 19 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.0.0-20231006144337-312b2db3028f 06 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20230920134428-7dc114a520bc 20 Sep 2023 M1 U1 Apache-2.0 Yes Details →
v0.0.0-20230721075647-f74280bc7da2 21 Jul 2023 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20230721075647-f74280bc7da2 21 Jul 2023 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20230709102142-389cddbde828 09 Jul 2023 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20230603012031-33ec00665c66 03 Jun 2023 M1 U1 Apache-2.0 Yes Details →
v0.0.0-20230429101210-c324c6a54a49 29 Apr 2023 M1 U1 Apache-2.0 Yes Details →
v0.1.1-0.20230420235459-c8183de1a5c5 20 Apr 2023 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20230419055027-de9ad9445da0 19 Apr 2023 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20230417133527-6d52935ad813 17 Apr 2023 M1 U1 Apache-2.0 Yes Details →
v0.0.0-20221029002459-fb2db51251ac 29 Oct 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20221029002459-fb2db51251ac 29 Oct 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220518071243-4270d5bfcfdb 18 May 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220516065707-db97609dd3bd 16 May 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220512061325-d8f4f12f989c 12 May 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220511021639-21632238b336 11 May 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220511021635-aab35e4efa1b 11 May 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220427134139-90f64d5a2c84 27 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220427041249-9db1db9b6788 27 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220427040854-413e54a901cc 27 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220427040733-4f66890e71a3 27 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220427040619-1e4191cf2bd3 27 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220412110854-c20d1ba62a10 12 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220412110845-defa147653fe 12 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220412065249-d7c6b89e3d66 12 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.0.0-20220412065115-12453f247749 12 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220412065115-12453f247749 12 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220412062508-e76ee78798dc 12 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220412062442-fe10d159651a 12 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220412062426-aecb012c7c39 12 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220412062309-31d0707be3db 12 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220412062216-8e7a3729a2ac 12 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220412062144-a109bf805602 12 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220412062100-31d3acaec1dc 12 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220412061944-b17bbff28f44 12 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220411062759-852bb73d99e3 11 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220411062757-83706fc13e89 11 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220406062200-b93cb2acdcd5 06 Apr 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220329061710-671fa1092360 29 Mar 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220323062733-abd9d71c45a1 23 Mar 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220317003355-528ff556c97a 17 Mar 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220316061648-597a50e69d99 16 Mar 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.7-0.20220301172632-87f2e175be31 01 Mar 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220301172632-87f2e175be31 01 Mar 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220301165602-e14c6d506e13 01 Mar 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220118065159-fa8e9f875805 18 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220118061835-c67586e0fe33 18 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220107143507-33f01009750f 07 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20220107063837-88aaecace3f1 07 Jan 2022 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20211210071144-2cec49f54b72 10 Dec 2021 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20211210061835-37b9db41424a 10 Dec 2021 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20211206121837-5ff217b4f8b9 06 Dec 2021 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20211206121809-2488ebacaab7 06 Dec 2021 M1 U1 Apache-2.0 Yes Details →
v0.4.8-0.20211206062212-09ff9d509fbb 06 Dec 2021 M1 U1 — Yes Details →
v0.1.1-0.20211206062043-86eb281e0926 06 Dec 2021 M1 U1 — Yes Details →
v0.4.8-0.20211206062043-86eb281e0926 06 Dec 2021 M1 U1 — Yes Details →
v0.4.8-0.20211123130300-586bf2344bd8 23 Nov 2021 M1 U1 — Yes Details →
v0.4.8-0.20211122034119-610dabf6ba71 22 Nov 2021 M1 U1 — Yes Details →
v0.4.8-0.20211119023857-9b17e05929f2 19 Nov 2021 M1 U1 — Yes Details →
v0.4.8-0.20211119023643-38c20f1b4101 19 Nov 2021 M1 U1 — Yes Details →
v0.4.8-0.20211118084206-30af8a39555f 18 Nov 2021 M1 U1 — Yes Details →
v0.4.8-0.20211118061723-220b0c097277 18 Nov 2021 M1 U1 — Yes Details →
v0.4.8-0.20211112044327-caa97eac3326 12 Nov 2021 M1 U1 — Yes Details →
v0.4.8-0.20211108230125-44770be8c20c 08 Nov 2021 M1 U1 — Yes Details →
v0.4.8-0.20211105061742-732d36ddfc99 05 Nov 2021 M1 U1 — Yes Details →
v0.4.8-0.20211103044424-58f3a37b6a1c 03 Nov 2021 M1 U1 — Yes Details →
v0.4.8-0.20211102001330-623555178870 02 Nov 2021 M1 U1 — Yes Details →
v0.4.8-0.20211102001308-001bbd44a461 02 Nov 2021 M1 U1 — Yes Details →
v0.4.8-0.20211102000807-7bebba6a0031 02 Nov 2021 M1 U1 — Yes Details →
v0.4.8-0.20211018191806-d575c46d8cfa 18 Oct 2021 M1 U1 — Yes Details →
v0.4.7-0.20211009121349-9c76304c034d 09 Oct 2021 M1 U1 — Yes Details →
v0.4.8-0.20211009121349-9c76304c034d 09 Oct 2021 M1 U1 — Yes Details →
v0.4.8-0.20211008061830-a0d54ce2acae 08 Oct 2021 M1 U1 — Yes Details →

The newest 120 of 912 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 1
  • 2024 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/opencontainers/umoci

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2021-29136: Improper input validation in umoci 5.5 medium 0.4.7 15 Feb 2022
CVE-2021-29136: Improper input validation in umoci N/A unrated 0.4.7 21 Aug 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/opencontainers/umoci

Is github.com/opencontainers/umoci safe to use?

Vulert records 2 vulnerabilities for github.com/opencontainers/umoci in Go: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/opencontainers/umoci's Vulert package health score?

Vulert scores github.com/opencontainers/umoci 83/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/opencontainers/umoci affected?

Yes. v0.6.0, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/opencontainers/umoci should I use?

v0.6.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/opencontainers/umoci have?

2 vulnerabilities are recorded for github.com/opencontainers/umoci in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/opencontainers/umoci vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/opencontainers/umoci in the last 12 months, and the oldest entry in this database dates to 15 Feb 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/opencontainers/umoci are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/opencontainers/umoci for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/opencontainers/umoci version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.