VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/openshift/origin: vulnerability history, versions and safety

github.com/openshift/origin is a package in the Go ecosystem. Vulert records 6 vulnerabilities for it across 120 releases, from Dec 2021 to Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
6 vulnerabilities recorded C1 M2 U3
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/openshift/origin vulnerabilities

Vulert verdict on github.com/openshift/origin v1.6.2 i

Updated on 22 Oct 2026

Action needed: v1.6.2 has 6 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 80/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.6.2 — affected i
  • Vulnerabilities on record 6 over 2 years · 0 in the last year i
  • Latest disclosure 21 Aug 2024 i
  • Highest CVSS 9.8 i
  • With no published fix 0 i
  • Stars 8,697 i
  • OpenSSF scorecard 4/10 i
  • Last release 2 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/openshift/origin, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20261022180232-f51936e37d94 22 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261022162909-53989e4a9868 22 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261022145625-8ea11c2596e3 22 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261021194600-267b35078b52 21 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261020194825-1c46c059aa85 20 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261020141519-869ed54e65fe 20 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261020065212-c1dbfeef3766 20 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261019173643-7afa4d669eda 19 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261016190912-c41701b4f8f4 16 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261016165322-2da7e58d5b64 16 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261016153438-a9c71b81be6f 16 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261015184908-f95ab45b16cf 15 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261015140545-8d04ac5820bb 15 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261015032531-f5c8eab43197 15 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261013185003-8b7110d6e153 13 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261012224040-5400ccbd8149 12 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261009220726-6849a84c34ef 09 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261009114124-b5582e561059 09 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261007193010-607693cae27e 07 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261006100305-5da4f1caab73 06 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261006092037-5b2e0329aec0 06 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261005183818-d70c95ed1126 05 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261001210817-c664cb715bf3 01 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20261001174831-f8f07a59b830 01 Oct 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260930033535-6c891e169fe1 30 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260929114823-b5dd46b0649a 29 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260928234345-12366550279d 28 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260928154755-c8935e88a4e4 28 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260928142750-478ccbae5bfc 28 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260928093441-a23dd50f0dad 28 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260924214825-4bf055776bfd 24 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260924175518-e05ced9a9542 24 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260924161650-eea038de24fb 24 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260924112847-0735d46a135e 24 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260923142532-418bc9908564 23 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260923104142-0c76f4f4ce32 23 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260923091622-033bef0b2a73 23 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260923051230-a98ef1ba7c2e 23 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260918133636-3c85f767a098 18 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260918113212-147d29558f3f 18 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260917232944-8c6afdd7e2b8 17 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260917151811-9298721c46ba 17 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260916145211-8c62e5ed3e5c 16 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260916013433-97d3b31de484 16 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260915190126-1e7a90a9e152 15 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260914173904-f2e64b02fcd6 14 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260911233409-93f6cccf5b2f 11 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260911175945-a4753030ddbd 11 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260911162812-aec6a14c66a2 11 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260911144216-1e22606a2f6b 11 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260910120634-f55ef01f33b7 10 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260910001351-62fd1e779b35 10 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260909031848-5540cb9bf740 09 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260908213717-114566f49b43 08 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260908001152-514803e50e08 08 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260907150014-c36d7eda04b0 07 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260907115756-8e4fe4ae4e3c 07 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260904200020-33306d29c2a8 04 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260904101706-ca3df39c9b50 04 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260903132354-e0a97b3d7af2 03 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260903040449-df3e97989ac4 03 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260902120315-f097372eba07 02 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260902041554-63cd4dfe6177 02 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260901190058-cc313a46448e 01 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260901115500-589a3d56b1bb 01 Sep 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260828052132-42b963ac884b 28 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260828020850-2f5b612639aa 28 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260828004505-4fa1bfc950af 28 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260827150619-6a0b6c9de36a 27 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260827073854-987e9a7c8af7 27 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260825143357-3068afd5a499 25 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260822134812-ed9fd91d108a 22 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260821174830-7c3c6db6842e 21 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260821070718-6e934545d670 21 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260820235703-591a8e3d0874 20 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260820072230-dbd1161c1894 20 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v1.6.2 20 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260819222126-c7ea3047944f 19 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260819133446-b4369f018b2e 19 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260818233641-fc3000c1f5a8 18 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260818192728-6008277c62e8 18 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260817201215-d5ed70fe5e48 17 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260817100317-872669f51c27 17 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260814143545-c3bcb4b24d7c 14 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260813172925-6e25f2aab0ae 13 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260813151350-35d5c1ad0610 13 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260813094121-5cddf6d79a09 13 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260812175304-660e831361a8 12 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260812093406-ad1e76cd09e9 12 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260811205517-50d8dd26516d 11 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260811191522-5975d11714d0 11 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260811154306-827756f1324d 11 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260811134635-3d4c2183a780 11 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260810222128-29be8bda8f0a 10 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260808134404-a302321dc817 08 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260808080000-84ad386ce9cb 08 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260808041402-52e6e8a360a6 08 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260807200853-3d514be342fb 07 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260806200735-ce6064a6df76 06 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260806134648-6b7ae2729fd3 06 Aug 2026 C1 M2 U3 Apache-2.0 Yes Details →
v0.0.0-20260806080913-a15c5b5680dc 06 Aug 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260806002016-fa0e36285dbc 06 Aug 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260805003841-4ccfabd1e58f 05 Aug 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260804155214-dc6fd161eca6 04 Aug 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260804073933-afb61f921d4a 04 Aug 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260731224945-e3c4a6bb8ca2 31 Jul 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260731164947-8d9dbe34d8bd 31 Jul 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260731133701-2afc4ee23e2a 31 Jul 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260731091832-e3d27df21051 31 Jul 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260731001114-b6450ca23d6f 31 Jul 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260730192805-9a3328cadd27 30 Jul 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260730180845-118982e53f66 30 Jul 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260730144246-2422d0eee22d 30 Jul 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260730080252-d023af01cd96 30 Jul 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260730063243-fba478bd1b2b 30 Jul 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260729191806-ed2a43cfebf6 29 Jul 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260729154902-00b345354b93 29 Jul 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260729034947-15f2cf29aa67 29 Jul 2026 C1 M2 U3 — Yes Details →
v1.6.0 29 Jul 2026 C1 M2 U3 — Yes Details →
v0.0.0-20260728203122-cd9052314453 28 Jul 2026 C1 M2 U3 — Yes Details →

The newest 120 of 813 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2021 2
  • 2022 1
  • 2024 3

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 6 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/openshift/origin

The 5 most severe of 6 vulnerabilities recorded for this package

Search all 6 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2016-1906: Authorization bypass in Openshift 9.8 critical 1.1.1 20 Dec 2021
CVE-2015-3207: Insecure cookies in Openshift Origin 5.3 medium 1.0.0 08 Jul 2022
CVE-2015-5250: Denial of Service in OpenShift Origin 4.3 medium 1.0.6 20 Dec 2021
Insecure Cookies in Openshift Origin N/A unrated 1.0.0 21 Aug 2024
CVE-2016-1906: Authorization bypass in Openshift in github.com/openshift/origin N/A unrated 1.1.1 21 Aug 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 22/Oct/2026 · Vulnerabilities in our DB: 524173

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/openshift/origin

Is github.com/openshift/origin safe to use?

Vulert records 6 vulnerabilities for github.com/openshift/origin in Go: 1 critical, 0 high, 2 medium and 0 low, plus 3 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/openshift/origin's Vulert package health score?

Vulert scores github.com/openshift/origin 80/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/openshift/origin affected?

Yes. v1.6.2, the version you would install today, has 6 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/openshift/origin should I use?

v1.6.2 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/openshift/origin have?

6 vulnerabilities are recorded for github.com/openshift/origin in the Go ecosystem: 1 critical, 0 high, 2 medium and 0 low, plus 3 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/openshift/origin vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/openshift/origin in the last 12 months, and the oldest entry in this database dates to 20 Dec 2021. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/openshift/origin are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/openshift/origin for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/openshift/origin version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.