VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/pkg/sftp: vulnerability history, versions and safety

github.com/pkg/sftp is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/pkg/sftp vulnerabilities

Vulert verdict on github.com/pkg/sftp v1.13.11 i

Updated on 23 Oct 2026

Good news: v1.13.11, the version you would install today, has no known vulnerabilities.

Package health score 82/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Widely used
  • Community Quiet

What to do: Stay on v1.13.11 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.13.11 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v1.13.11 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 1,663 i
  • OpenSSF scorecard 4/10 i
  • Last release 3 months ago i
  • Licence BSD-2-Clause i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/pkg/sftp, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.13.12-0.20261019174502-4778ed9f1d2c 19 Oct 2026 none BSD-2-Clause — Details →
v1.13.12-0.20261019140733-5771a0def111 19 Oct 2026 none BSD-2-Clause — Details →
v1.13.12-0.20261018103102-f79a590cd183 18 Oct 2026 none BSD-2-Clause — Details →
v1.13.12-0.20261017093404-eb379c1f4327 17 Oct 2026 none BSD-2-Clause — Details →
v1.13.12-0.20261008123528-16147c5dd9bb 08 Oct 2026 none BSD-2-Clause — Details →
v1.13.11 12 Jul 2026 none BSD-2-Clause — Details →
v1.13.11-0.20260712132149-c1bc2fffcb14 12 Jul 2026 none BSD-2-Clause — Details →
v1.13.11-0.20260608132559-dda38481a0d1 08 Jun 2026 none BSD-2-Clause — Details →
v1.13.11-0.20260521190907-ef1dc72596d6 21 May 2026 none BSD-2-Clause — Details →
v1.13.11-0.20251120125258-ab3b1a348110 20 Nov 2025 none BSD-2-Clause — Details →
v1.13.10 22 Oct 2025 none BSD-2-Clause — Details →
v1.13.10-0.20251006124056-ad5b1e75691b 06 Oct 2025 none BSD-2-Clause — Details →
v1.13.10-0.20250827113423-ac1008fcf182 27 Aug 2025 none BSD-2-Clause — Details →
v1.13.10-0.20250713181311-53c62f1551a4 13 Jul 2025 none BSD-2-Clause — Details →
v1.13.10-0.20250530140015-c7176b3c6ee0 30 May 2025 none BSD-2-Clause — Details →
v1.13.10-0.20250523102523-f1b135a6f5c7 23 May 2025 none BSD-2-Clause — Details →
v1.13.10-0.20250328204405-36ce9cfd5c25 28 Mar 2025 none BSD-2-Clause — Details →
v1.13.10-0.20250327233929-02ac914e3540 27 Mar 2025 none BSD-2-Clause — Details →
v1.13.9 25 Mar 2025 none BSD-2-Clause — Details →
v1.13.9-0.20250312150834-19bfb49e7134 12 Mar 2025 none BSD-2-Clause — Details →
v1.13.8 12 Mar 2025 none BSD-2-Clause — Details →
v1.13.8-0.20250227140229-584399def273 27 Feb 2025 none BSD-2-Clause — Details →
v1.13.8-0.20250103171805-fb0652cf58a5 03 Jan 2025 none BSD-2-Clause — Details →
v1.13.8-0.20250102191518-6be1dd2db9ed 02 Jan 2025 none BSD-2-Clause — Details →
v1.13.8-0.20241212032548-a3da03b0ba23 12 Dec 2024 none BSD-2-Clause — Details →
v1.13.8-0.20241211233254-1910b9509cc0 11 Dec 2024 none BSD-2-Clause — Details →
v1.13.7 05 Jun 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240605142245-c8fe1f69640c 05 Jun 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240426233339-54946566af05 26 Apr 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240426070433-c1f47ba1b97e 26 Apr 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240426005439-06342e8b90ea 26 Apr 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240425142001-478aa2e956f5 25 Apr 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240425125325-0814039fdfe4 25 Apr 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240410063531-637088883317 10 Apr 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240408183416-c194b63c4b89 08 Apr 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240406095607-3c39a36b26d1 06 Apr 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240406021136-3588ee80db20 06 Apr 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240405200740-8411183d33fd 05 Apr 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240405163727-96b29c55dd0f 05 Apr 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240404202647-9b553ccfda36 04 Apr 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240320080924-dbd01653d6a6 20 Mar 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240315010706-104c0f659393 15 Mar 2024 none BSD-2-Clause — Details →
v0.0.0-20240214104840-fbb0b8bdb30c 14 Feb 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240214104840-fbb0b8bdb30c 14 Feb 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240212145853-46d90e3f96e8 12 Feb 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240212074423-159d28655bcb 12 Feb 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240209094632-bae544b7f48b 09 Feb 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240206150243-5d66cdeb9ac8 06 Feb 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240206085112-3ce4d4e6e2bf 06 Feb 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240206084141-72aa4039a11c 06 Feb 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240206083451-ba3d6ab7c6a0 06 Feb 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240206083127-e808920da05a 06 Feb 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240206082728-6c7c0da80c25 06 Feb 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240206081254-4cd7ff45fc98 06 Feb 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240119015644-3df3035b7482 19 Jan 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240119012716-e21cd9480548 19 Jan 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240119012322-f3501dc6ba30 19 Jan 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240119002023-d1903fbd460e 19 Jan 2024 none BSD-2-Clause — Details →
v1.13.7-0.20240107114909-931e169fabea 07 Jan 2024 none BSD-2-Clause — Details →
v1.13.7-0.20231219121236-22452ea54d29 19 Dec 2023 none BSD-2-Clause — Details →
v1.13.7-0.20231218225913-3bb9a5a1caf8 18 Dec 2023 none BSD-2-Clause — Details →
v1.13.6-0.20231120085349-5bdc2b0e679d 20 Nov 2023 none BSD-2-Clause — Details →
v1.13.7-0.20231120085349-5bdc2b0e679d 20 Nov 2023 none BSD-2-Clause — Details →
v1.13.7-0.20231113081333-3aa53a572f6b 13 Nov 2023 none BSD-2-Clause — Details →
v1.13.7-0.20231110154649-273341d3473b 10 Nov 2023 none BSD-2-Clause — Details →
v1.13.7-0.20231109141846-1c8cffaef573 09 Nov 2023 none BSD-2-Clause — Details →
v1.13.7-0.20231109113253-d45e538f7a4f 09 Nov 2023 none BSD-2-Clause — Details →
v1.13.7-0.20231024172027-b0487bc4a60b 24 Oct 2023 none BSD-2-Clause — Details →
v1.13.7-0.20231023155645-d6dd372d9c88 23 Oct 2023 none BSD-2-Clause — Details →
v1.13.7-0.20231002074621-3a25fef2f1fa 02 Oct 2023 none BSD-2-Clause — Details →
v1.13.7-0.20231002061240-b2b4a87c836e 02 Oct 2023 none BSD-2-Clause — Details →
v1.13.6 12 Aug 2023 none BSD-2-Clause — Details →
v1.13.6-0.20230812070337-669003cef43b 12 Aug 2023 none BSD-2-Clause — Details →
v1.13.6-0.20230809233543-e9377c8373b3 09 Aug 2023 none BSD-2-Clause — Details →
v1.13.6-0.20230714145805-ec1c8caca60e 14 Jul 2023 none BSD-2-Clause — Details →
v1.13.6-0.20230714135244-c632ce6285b7 14 Jul 2023 none BSD-2-Clause — Details →
v0.0.0-20230519155753-72a484f090c5 19 May 2023 none BSD-2-Clause — Details →
v1.13.6-0.20230519155753-72a484f090c5 19 May 2023 none BSD-2-Clause — Details →
v1.13.6-0.20230519060825-78e49babba67 19 May 2023 none BSD-2-Clause — Details →
v1.13.6-0.20230401224434-34d66dd28e76 01 Apr 2023 none BSD-2-Clause — Details →
v1.13.6-0.20230327172527-5a5e762d063f 27 Mar 2023 none BSD-2-Clause — Details →
v0.0.0-20230213180117-971c283182b6 13 Feb 2023 none BSD-2-Clause — Details →
v1.13.6-0.20230213180117-971c283182b6 13 Feb 2023 none BSD-2-Clause — Details →
v1.13.6-0.20230213141836-8add05593696 13 Feb 2023 none BSD-2-Clause — Details →
v0.0.0-20230104082718-2489717da0f3 04 Jan 2023 none BSD-2-Clause — Details →
v1.13.6-0.20230104082718-2489717da0f3 04 Jan 2023 none BSD-2-Clause — Details →
v0.0.0-20221225162142-08880975fb1e 25 Dec 2022 none BSD-2-Clause — Details →
v1.13.6-0.20221225162142-08880975fb1e 25 Dec 2022 none BSD-2-Clause — Details →
v0.0.0-20221123015943-707787e8bcf7 23 Nov 2022 none BSD-2-Clause — Details →
v1.13.6-0.20221123015943-707787e8bcf7 23 Nov 2022 none BSD-2-Clause — Details →
v1.13.6-0.20221122111620-f6678103bdb4 22 Nov 2022 none BSD-2-Clause — Details →
v0.0.0-20221020054726-e4133ab7e9bd 20 Oct 2022 none BSD-2-Clause — Details →
v1.13.4-0.20221020054726-e4133ab7e9bd 20 Oct 2022 none BSD-2-Clause — Details →
v1.13.6-0.20221020054726-e4133ab7e9bd 20 Oct 2022 none BSD-2-Clause — Details →
v1.13.6-0.20221018182125-7da137aa03f0 18 Oct 2022 none BSD-2-Clause — Details →
v1.13.6-0.20221018163612-85143703909d 18 Oct 2022 none BSD-2-Clause — Details →
v1.13.6-0.20221016142112-88c72168ab7f 16 Oct 2022 none BSD-2-Clause — Details →
v1.13.6-0.20221016140646-c4323ce9f25f 16 Oct 2022 none BSD-2-Clause — Details →
v1.13.6-0.20221015151105-624034d7c443 15 Oct 2022 none BSD-2-Clause — Details →
v1.13.6-0.20221014151708-9183e7fd791a 14 Oct 2022 none BSD-2-Clause — Details →
v1.13.6-0.20221014125459-6a7168cf46fd 14 Oct 2022 none — — Details →
v0.0.0-20220929090223-3aa4378d78d5 29 Sep 2022 none — — Details →
v1.13.6-0.20220929090223-3aa4378d78d5 29 Sep 2022 none — — Details →
v1.13.6-0.20220929085109-975b486c5e92 29 Sep 2022 none — — Details →
v1.13.6-0.20220831160757-628507938ec6 31 Aug 2022 none — — Details →
v1.13.6-0.20220831152123-27d8571ed313 31 Aug 2022 none — — Details →
v1.13.6-0.20220831151846-811ed177f06e 31 Aug 2022 none — — Details →
v0.0.0-20220716075551-51a5aa4e044d 16 Jul 2022 none — — Details →
v1.13.6-0.20220716075551-51a5aa4e044d 16 Jul 2022 none — — Details →
v1.13.6-0.20220711122653-cf523d99b5d2 11 Jul 2022 none — — Details →
v1.13.6-0.20220711113422-aad3ee1c0eda 11 Jul 2022 none — — Details →
v1.13.6-0.20220629121303-cc19e20d7290 29 Jun 2022 none — — Details →
v1.13.5 30 Mar 2022 none — — Details →
v1.13.5-0.20220330091711-a17a626ab843 30 Mar 2022 none — — Details →
v1.13.5-0.20220303113417-dcfc1d5e4162 03 Mar 2022 none — — Details →
v1.13.5-0.20220303113024-c7fdf5e5c693 03 Mar 2022 none — — Details →
v1.13.5-0.20220303110940-59b2472859fb 03 Mar 2022 none — — Details →
v1.13.5-0.20220303084316-65f24bcee4c2 03 Mar 2022 none — — Details →
v1.13.5-0.20220303084311-c2c0f6090e70 03 Mar 2022 none — — Details →
v1.13.5-0.20220302174454-03407a734b9e 02 Mar 2022 none — — Details →

The newest 120 of 1,191 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/pkg/sftp

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/pkg/sftp

Is github.com/pkg/sftp safe to use?

Vulert has no vulnerabilities on record for github.com/pkg/sftp in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/pkg/sftp's Vulert package health score?

Vulert scores github.com/pkg/sftp 82/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/pkg/sftp affected?

No. v1.13.11, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of github.com/pkg/sftp should I use?

v1.13.11 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/pkg/sftp have?

0 vulnerabilities are recorded for github.com/pkg/sftp in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/pkg/sftp vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/pkg/sftp in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/pkg/sftp are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/pkg/sftp for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/pkg/sftp version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.