VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/openshift/hive: vulnerability history, versions and safety

github.com/openshift/hive is a package in the Go ecosystem. Vulert records 6 vulnerabilities for it across 120 releases, from Dec 2024 to Mar 2025. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
6 vulnerabilities recorded H2 M1 U3
i
6 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/openshift/hive vulnerabilities

Vulert verdict on github.com/openshift/hive v1.1.16 i

Updated on 23 Oct 2026

Careful: 6 of the 6 vulnerabilities Vulert records for this package have no fix yet. Plan around those, or apply the workaround listed for each.

Package health score 67/100
  • Security Some issues to review
  • Maintenance Sustainable
  • Popularity Niche
  • Community Quiet

What to do: Plan around the 6 vulnerabilities with no published fix: each lists the affected range and any workaround that reduces exposure. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v1.1.16 — unaffected i
  • Vulnerabilities on record 6 over 1 year · 0 in the last year i
  • Latest disclosure 25 Mar 2025 i
  • Highest CVSS 8.8 i
  • With no published fix 6 i
  • Stars 275 i
  • OpenSSF scorecard 3/10 i
  • Last release this month i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/openshift/hive, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20261022181904-20d13c74d2a9 22 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20261022181904-20d13c74d2a9 22 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20261022030817-91996248bb00 22 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20261022030817-91996248bb00 22 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20261016225443-ffdac3734e42 16 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20261016225443-ffdac3734e42 16 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20261014011343-fcc059288bb0 14 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20261014011343-fcc059288bb0 14 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20261009005406-0948ca7420ef 09 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20261009005406-0948ca7420ef 09 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20261002161616-a00caa79b98d 02 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20261002161616-a00caa79b98d 02 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20261001212203-78916bf8971c 01 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20261001212203-78916bf8971c 01 Oct 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260929053646-01de8edf2688 29 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260929053646-01de8edf2688 29 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260929012950-08df2ec9a843 29 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260929012950-08df2ec9a843 29 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260928221401-1b3ce936fcd4 28 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260928221401-1b3ce936fcd4 28 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260928174632-e7206e20255c 28 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260928174632-e7206e20255c 28 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260928162405-6229c3c25150 28 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260928162405-6229c3c25150 28 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260925163703-7c7e86e6d9cd 25 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260925163703-7c7e86e6d9cd 25 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260924214207-b12e4e2569ae 24 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260924214207-b12e4e2569ae 24 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260924192525-4f989da878c8 24 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260924192525-4f989da878c8 24 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260924113900-ec5196398282 24 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260924113900-ec5196398282 24 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260923222241-20e658962040 23 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260923222241-20e658962040 23 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260923185239-f72229f98b9f 23 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260923185239-f72229f98b9f 23 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260922214150-8104fcfa0aaf 22 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260922214150-8104fcfa0aaf 22 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260916200615-74185d6d1ee6 16 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260916200615-74185d6d1ee6 16 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260916030848-8f9dd1e8d47c 16 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260916030848-8f9dd1e8d47c 16 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260915194240-6333bfbb7de0 15 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260915194240-6333bfbb7de0 15 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260914180628-60a732dc1903 14 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260914180628-60a732dc1903 14 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260903065954-f2be0d4ee185 03 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260902180033-f5e607d248eb 02 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260902180033-f5e607d248eb 02 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260902143515-5ac893504277 02 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260902143515-5ac893504277 02 Sep 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260827190012-5068da00bed7 27 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260827190012-5068da00bed7 27 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260826000905-b60b2a0d1190 26 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260826000905-b60b2a0d1190 26 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260825190019-be34584b9cc1 25 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260825190019-be34584b9cc1 25 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260824182322-c44c285f3fe0 24 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260824182322-c44c285f3fe0 24 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260821194747-c02e51732cbc 21 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260821194747-c02e51732cbc 21 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260819184648-99b389ea3f7b 19 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260819184648-99b389ea3f7b 19 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260819001824-e93e22e8c698 19 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260819001824-e93e22e8c698 19 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260807204418-f1cc92b576a5 07 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260807204418-f1cc92b576a5 07 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260807153158-3d970bc9c522 07 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260807153158-3d970bc9c522 07 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260806232855-623a7bc187c7 06 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260806232855-623a7bc187c7 06 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260804164256-fec39249cdc5 04 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260804164256-fec39249cdc5 04 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260803182101-20af6945a70e 03 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260803182101-20af6945a70e 03 Aug 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260731185504-732be3a5e787 31 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260731185504-732be3a5e787 31 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260731002745-6049a6d68601 31 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260731002745-6049a6d68601 31 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260730220326-31a0abed414a 30 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260730211307-11f681a38530 30 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260730211307-11f681a38530 30 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260729204917-c0b802fe5402 29 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260729204917-c0b802fe5402 29 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260727160735-c04833d91bed 27 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260727160735-c04833d91bed 27 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260724123611-aa851cbbab20 24 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260724123611-aa851cbbab20 24 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260720214935-3b28262c9c20 20 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260720214935-3b28262c9c20 20 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260717144027-bd1359f00711 17 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260717144027-bd1359f00711 17 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260716234914-a05cae7a0e0c 16 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260716234914-a05cae7a0e0c 16 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260715063224-0472c6efe182 15 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260715063224-0472c6efe182 15 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260710225308-c701d130493f 10 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260710225308-c701d130493f 10 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260706181456-3a29cc3ca8f8 06 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v1.1.17-0.20260706181456-3a29cc3ca8f8 06 Jul 2026 H2 M1 U3 Apache-2.0 No Details →
v0.0.0-20260629193524-2ea50dca914c 29 Jun 2026 H2 M1 U3 — No Details →
v1.1.17-0.20260629193524-2ea50dca914c 29 Jun 2026 H2 M1 U3 — No Details →
v0.0.0-20260624185507-1653181d31b3 24 Jun 2026 H2 M1 U3 — No Details →
v1.1.17-0.20260624185507-1653181d31b3 24 Jun 2026 H2 M1 U3 — No Details →
v0.0.0-20260617005215-7c2c258614b2 17 Jun 2026 H2 M1 U3 — No Details →
v1.1.17-0.20260617005215-7c2c258614b2 17 Jun 2026 H2 M1 U3 — No Details →
v0.0.0-20260616204807-0e76324fa9a6 16 Jun 2026 H2 M1 U3 — No Details →
v1.1.17-0.20260616204807-0e76324fa9a6 16 Jun 2026 H2 M1 U3 — No Details →
v0.0.0-20260616181004-fea64ff77adb 16 Jun 2026 H2 M1 U3 — No Details →
v1.1.17-0.20260616181004-fea64ff77adb 16 Jun 2026 H2 M1 U3 — No Details →
v0.0.0-20260608092216-188a312d8f4b 08 Jun 2026 H2 M1 U3 — No Details →
v1.1.17-0.20260608092216-188a312d8f4b 08 Jun 2026 H2 M1 U3 — No Details →
v0.0.0-20260605122016-cb3fb8a1dbe9 05 Jun 2026 H2 M1 U3 — No Details →
v1.1.17-0.20260605122016-cb3fb8a1dbe9 05 Jun 2026 H2 M1 U3 — No Details →
v0.0.0-20260529195552-db81e46ad42b 29 May 2026 H2 M1 U3 — No Details →
v1.1.17-0.20260529195552-db81e46ad42b 29 May 2026 H2 M1 U3 — No Details →
v0.0.0-20260529063700-91d3589f67fc 29 May 2026 H2 M1 U3 — No Details →
v1.1.17-0.20260529063700-91d3589f67fc 29 May 2026 H2 M1 U3 — No Details →
v0.0.0-20260527211446-a455a02f440e 27 May 2026 H2 M1 U3 — No Details →
v1.1.17-0.20260527211446-a455a02f440e 27 May 2026 H2 M1 U3 — No Details →

The newest 120 of 1,543 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 1
  • 2025 5

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 6 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/openshift/hive

The 5 most severe of 6 vulnerabilities recorded for this package

Search all 6 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2024-25133: OpenShift Hive RCE Vulnerability Leading to Privilege Escalation 8.8 high No fix published 31 Dec 2024
CVE-2025-2241: OpenShift Hive Exposes VCenter Credentials via ClusterProvision 8.2 high No fix published 17 Mar 2025
CVE-2024-25132: OpenShift Hive Uncontrolled Resource Consumption Vulnerability 4.3 medium No fix published 19 Mar 2025
CVE-2024-25133: OpenShift Hive Remote Code Execution Vulnerability Leading to Privilege Escalation N/A unrated No fix published 07 Jan 2025
Exposed VCenter Credentials in Openshift Hive: GO-2025-3529 Vulnerability N/A unrated No fix published 18 Mar 2025

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/openshift/hive

Is github.com/openshift/hive safe to use?

Vulert records 6 vulnerabilities for github.com/openshift/hive in Go: 0 critical, 2 high, 1 medium and 0 low, plus 3 not yet rated. 6 of them have no published fix yet, so those are the ones to avoid or mitigate.

What is github.com/openshift/hive's Vulert package health score?

Vulert scores github.com/openshift/hive 67/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Which version of github.com/openshift/hive should I use?

v1.1.16 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/openshift/hive have?

6 vulnerabilities are recorded for github.com/openshift/hive in the Go ecosystem: 0 critical, 2 high, 1 medium and 0 low, plus 3 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/openshift/hive vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/openshift/hive in the last 12 months, and the oldest entry in this database dates to 31 Dec 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/openshift/hive are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/openshift/hive for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/openshift/hive version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.