VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/openshift/telemeter: vulnerability history, versions and safety

github.com/openshift/telemeter is a package in the Go ecosystem. Vulert records 1 vulnerability for it across 120 releases, first recorded in Jun 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
1 vulnerabilities recorded U1
i
1 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/openshift/telemeter vulnerabilities

Vulert verdict on github.com/openshift/telemeter v3.11.0+incompatible i

Updated on 23 Oct 2026

Careful: v3.11.0+incompatible has 1 known vulnerability, and 1 has no fix yet. Use an earlier safe version, or the workaround listed for each one.

Package health score 57/100
  • Security Minor issues
  • Maintenance Slowing
  • Popularity Niche
  • Community Quiet

The current release has a vulnerability with no published fix, which caps this score.

What to do: Pin an earlier, unaffected release if you can, and apply the workaround each vulnerability lists until a fix is published. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v3.11.0+incompatible — affected i
  • Vulnerabilities on record 1 over 1 year · 0 in the last year i
  • Latest disclosure 28 Jun 2024 i
  • Highest CVSS n/a i
  • With no published fix 1 i
  • Stars 104 i
  • OpenSSF scorecard 3/10 i
  • Last release 97 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/openshift/telemeter, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20261015182046-c1db3dc4233d 15 Oct 2026 U1 Apache-2.0 No Details →
v0.0.0-20260930133957-1c02f15faef0 30 Sep 2026 U1 Apache-2.0 No Details →
v0.0.0-20260930133956-51c7af35ae96 30 Sep 2026 U1 Apache-2.0 No Details →
v0.0.0-20260930133956-547ca0b2fb80 30 Sep 2026 U1 Apache-2.0 No Details →
v0.0.0-20260925174237-7efb876658c0 25 Sep 2026 U1 Apache-2.0 No Details →
v0.0.0-20260923114747-83ff84cce735 23 Sep 2026 U1 Apache-2.0 No Details →
v0.0.0-20260918131350-562e12c31ded 18 Sep 2026 U1 Apache-2.0 No Details →
v0.0.0-20260918111155-9ae2c1bbfc57 18 Sep 2026 U1 Apache-2.0 No Details →
v0.0.0-20260824094220-a47a32bd9e52 24 Aug 2026 U1 Apache-2.0 No Details →
v0.0.0-20260701075920-22ba1701333f 01 Jul 2026 U1 Apache-2.0 No Details →
v0.0.0-20260608081838-a1dabee1951b 08 Jun 2026 U1 Apache-2.0 No Details →
v0.0.0-20260511144858-15895a068e7e 11 May 2026 U1 Apache-2.0 No Details →
v0.0.0-20260508095353-c2ffb0a7035e 08 May 2026 U1 Apache-2.0 No Details →
v0.0.0-20260507140301-33073dc20ca6 07 May 2026 U1 Apache-2.0 No Details →
v0.0.0-20260507093955-999cdb5f7cde 07 May 2026 U1 Apache-2.0 No Details →
v0.0.0-20260506150851-4da8f469ce90 06 May 2026 U1 Apache-2.0 No Details →
v0.0.0-20260506095927-d07a833015fe 06 May 2026 U1 Apache-2.0 No Details →
v0.0.0-20260505161857-b79b872a65ed 05 May 2026 U1 Apache-2.0 No Details →
v0.0.0-20260312080025-d6c7dd499f71 12 Mar 2026 U1 Apache-2.0 No Details →
v0.0.0-20260211174519-84771f97cd5a 11 Feb 2026 U1 Apache-2.0 No Details →
v0.0.0-20260114162546-12cc47efc6cf 14 Jan 2026 U1 Apache-2.0 No Details →
v0.0.0-20251222111610-6368d9105deb 22 Dec 2025 U1 Apache-2.0 No Details →
v0.0.0-20251218090929-0ae29fcfa400 18 Dec 2025 U1 Apache-2.0 No Details →
v0.0.0-20251125085824-a54acdfeb2d6 25 Nov 2025 U1 Apache-2.0 No Details →
v0.0.0-20251114102649-80acf50b0b10 14 Nov 2025 U1 Apache-2.0 No Details →
v0.0.0-20251113155945-4a34396d3b8c 13 Nov 2025 U1 Apache-2.0 No Details →
v0.0.0-20250916112632-0634eee9f7ef 16 Sep 2025 U1 Apache-2.0 No Details →
v0.0.0-20241206155808-98dad3eece13 06 Dec 2024 U1 Apache-2.0 No Details →
v0.0.0-20241113134001-700802fe29ab 13 Nov 2024 U1 Apache-2.0 No Details →
v0.0.0-20241001132741-0453f452b7ca 01 Oct 2024 U1 Apache-2.0 No Details →
v0.0.0-20240903221426-ecc16b6a0335 03 Sep 2024 U1 Apache-2.0 No Details →
v0.0.0-20240730141700-e2b25245eb81 30 Jul 2024 U1 Apache-2.0 No Details →
v0.0.0-20240725130059-c9592ded3e9a 25 Jul 2024 U1 Apache-2.0 No Details →
v0.0.0-20240702094013-0634a6d029bf 02 Jul 2024 U1 Apache-2.0 No Details →
v0.0.0-20240626090040-1f7268163afc 26 Jun 2024 U1 Apache-2.0 No Details →
v0.0.0-20240620135552-14489f7dc656 20 Jun 2024 U1 Apache-2.0 No Details →
v0.0.0-20240617093831-c1ecd1050c8f 17 Jun 2024 U1 Apache-2.0 No Details →
v0.0.0-20240614203812-18ddf550c26e 14 Jun 2024 U1 Apache-2.0 No Details →
v0.0.0-20240524205709-c90b26fcf3a1 24 May 2024 U1 Apache-2.0 No Details →
v0.0.0-20240415131037-6ab43e488013 15 Apr 2024 U1 Apache-2.0 No Details →
v0.0.0-20240228022757-18e1ab8682c7 28 Feb 2024 U1 Apache-2.0 No Details →
v0.0.0-20240215235102-a9417a6062c3 15 Feb 2024 U1 Apache-2.0 No Details →
v0.0.0-20240208101709-23b2e4b9213b 08 Feb 2024 U1 Apache-2.0 No Details →
v0.0.0-20240129175015-2dd35e375ee9 29 Jan 2024 U1 Apache-2.0 No Details →
v0.0.0-20231121163018-e1f625aa31e4 21 Nov 2023 U1 Apache-2.0 No Details →
v0.0.0-20231102071132-f40faee6edd8 02 Nov 2023 U1 Apache-2.0 No Details →
v0.0.0-20230220100558-3b5eb87fd042 20 Feb 2023 U1 Apache-2.0 No Details →
v0.0.0-20230216124129-ee1ba4699b82 16 Feb 2023 U1 Apache-2.0 No Details →
v0.0.0-20230105105228-8b94471729da 05 Jan 2023 U1 Apache-2.0 No Details →
v0.0.0-20221007092809-8f8ccf771bac 07 Oct 2022 U1 Apache-2.0 No Details →
v0.0.0-20220809122804-491a32cfff18 09 Aug 2022 U1 Apache-2.0 No Details →
v0.0.0-20220809094800-130aef25c25b 09 Aug 2022 U1 Apache-2.0 No Details →
v0.0.0-20220718193640-77b2966d36c8 18 Jul 2022 U1 Apache-2.0 No Details →
v0.0.0-20220715142546-f5cddc957a79 15 Jul 2022 U1 Apache-2.0 No Details →
v0.0.0-20220510160356-76493ca3d439 10 May 2022 U1 Apache-2.0 No Details →
v0.0.0-20220422142044-a468f93db250 22 Apr 2022 U1 Apache-2.0 No Details →
v0.0.0-20220215151438-987128a17c19 15 Feb 2022 U1 Apache-2.0 No Details →
v0.0.0-20220131114629-25d04c312e7e 31 Jan 2022 U1 Apache-2.0 No Details →
v0.0.0-20211122111111-2c9c76e62783 22 Nov 2021 U1 Apache-2.0 No Details →
v0.0.0-20211103155647-91bff806c605 03 Nov 2021 U1 Apache-2.0 No Details →
v0.0.0-20211103100345-fdef282d8af6 03 Nov 2021 U1 Apache-2.0 No Details →
v0.0.0-20211102102325-239dc6f7fbda 02 Nov 2021 U1 Apache-2.0 No Details →
v0.0.0-20211028154226-61e02ba3d46f 28 Oct 2021 U1 Apache-2.0 No Details →
v0.0.0-20211028105324-336d0a92cb9f 28 Oct 2021 U1 Apache-2.0 No Details →
v0.0.0-20211028073724-db0936a64e0c 28 Oct 2021 U1 Apache-2.0 No Details →
v0.0.0-20211026154926-8ac264a8c54a 26 Oct 2021 U1 Apache-2.0 No Details →
v0.0.0-20211020161610-f4d2920974d7 20 Oct 2021 U1 Apache-2.0 No Details →
v0.0.0-20211018172643-a7872cca384e 18 Oct 2021 U1 Apache-2.0 No Details →
v0.0.0-20211015142845-d2b33379bdd7 15 Oct 2021 U1 Apache-2.0 No Details →
v0.0.0-20211013172813-4e8540eb2707 13 Oct 2021 U1 Apache-2.0 No Details →
v0.0.0-20211006153705-eabad556e875 06 Oct 2021 U1 Apache-2.0 No Details →
v0.0.0-20211004140836-cb73302fd41a 04 Oct 2021 U1 Apache-2.0 No Details →
v0.0.0-20210909133517-1e97dddbde49 09 Sep 2021 U1 Apache-2.0 No Details →
v0.0.0-20210825005315-03842e05c353 25 Aug 2021 U1 Apache-2.0 No Details →
v0.0.0-20210315152226-e4dac5123ef6 15 Mar 2021 U1 Apache-2.0 No Details →
v0.0.0-20210224215823-d7cd4df1ba5f 24 Feb 2021 U1 Apache-2.0 No Details →
v0.0.0-20200917214846-895aca154f5c 17 Sep 2020 U1 Apache-2.0 No Details →
v0.0.0-20200717151618-1c05598922c2 17 Jul 2020 U1 Apache-2.0 No Details →
v0.0.0-20200629165059-7413e5f8141b 29 Jun 2020 U1 Apache-2.0 No Details →
v0.0.0-20200520115854-ca9c4f2c12e1 20 May 2020 U1 Apache-2.0 No Details →
v0.0.0-20200505124636-e35427864acd 05 May 2020 U1 Apache-2.0 No Details →
v0.0.0-20200505090121-5ab3f7af5ecc 05 May 2020 U1 Apache-2.0 No Details →
v0.0.0-20200331160251-2e1f41a51ae8 31 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200331145307-7885e6d30dd3 31 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200331134205-b42fb6a9bd7f 31 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200331134106-1d08da2f64b3 31 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200331132931-5bf077f55a5d 31 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200331132649-19243798f48b 31 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200330172201-ad1a1eec6118 30 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200330155115-30f6c1a2f398 30 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200330155055-75c27ea089df 30 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200330155019-b237e4185a6b 30 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200330154928-cdcc68d80b20 30 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200326211259-debbf8601f20 26 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200325174501-7246a9504c98 25 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200320113632-6dd8385efe5f 20 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200320100328-e5994a9ed570 20 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200320094254-0d6b257f11ca 20 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200319172016-ec41086ebc4d 19 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200319171939-e7d96853c33e 19 Mar 2020 U1 Apache-2.0 No Details →
v0.0.0-20200318144222-06217cc50a09 18 Mar 2020 U1 — No Details →
v0.0.0-20200318141014-8888b9590a7a 18 Mar 2020 U1 — No Details →
v0.0.0-20200318141012-62274a88708f 18 Mar 2020 U1 — No Details →
v0.0.0-20200318141009-5ce0473e5ed8 18 Mar 2020 U1 — No Details →
v0.0.0-20200318140936-3b0a3b48d1b3 18 Mar 2020 U1 — No Details →
v0.0.0-20200318140935-1c290d2a30e1 18 Mar 2020 U1 — No Details →
v0.0.0-20200318140933-da0868097ebb 18 Mar 2020 U1 — No Details →
v0.0.0-20200318140930-dd217aa7aaa5 18 Mar 2020 U1 — No Details →
v0.0.0-20200318140928-6e06330742c2 18 Mar 2020 U1 — No Details →
v0.0.0-20200318091051-5de4cc76f442 18 Mar 2020 U1 — No Details →
v0.0.0-20200305135649-fa41a6ae349c 05 Mar 2020 U1 — No Details →
v0.0.0-20200304212642-67c93fb1e632 04 Mar 2020 U1 — No Details →
v0.0.0-20200304162315-f7cd86837d06 04 Mar 2020 U1 — No Details →
v0.0.0-20200203233535-7853182efa4a 03 Feb 2020 U1 — No Details →
v0.0.0-20200122133310-6088ae3b0f2b 22 Jan 2020 U1 — No Details →
v0.0.0-20200122132008-a65da26cf1aa 22 Jan 2020 U1 — No Details →
v0.0.0-20200122004242-f64b1ae6e37a 22 Jan 2020 U1 — No Details →
v0.0.0-20200121173555-95621237a985 21 Jan 2020 U1 — No Details →
v0.0.0-20200117175348-7d0245b55738 17 Jan 2020 U1 — No Details →
v0.0.0-20191217223125-24d6d0009a54 17 Dec 2019 U1 — No Details →

The newest 120 of 143 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 1 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/openshift/telemeter

The 1 most severe of 1 vulnerabilities recorded for this package

Search all 1 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2024-5037: Openshift/telemeter JWT Authentication Bypass N/A unrated No fix published 28 Jun 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/openshift/telemeter

Is github.com/openshift/telemeter safe to use?

Vulert records 1 vulnerabilities for github.com/openshift/telemeter in Go: 0 critical, 0 high, 0 medium and 0 low, plus 1 not yet rated. 1 of them has no published fix yet, so that is the one to avoid or mitigate.

What is github.com/openshift/telemeter's Vulert package health score?

Vulert scores github.com/openshift/telemeter 57/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15). The current release has a vulnerability with no published fix, which caps this score.

Is the latest version of github.com/openshift/telemeter affected?

Yes. v3.11.0+incompatible, the version you would install today, has 1 known vulnerability, and 1 has no published fix yet. Use an earlier unaffected release, or the workaround each vulnerability lists.

Which version of github.com/openshift/telemeter should I use?

v3.11.0+incompatible is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/openshift/telemeter have?

1 vulnerability is recorded for github.com/openshift/telemeter in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/openshift/telemeter vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/openshift/telemeter in the last 12 months, and the oldest entry in this database dates to 28 Jun 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/openshift/telemeter are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/openshift/telemeter for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/openshift/telemeter version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.