VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/prometheus/exporter-toolkit: vulnerability history, versions and safety

github.com/prometheus/exporter-toolkit is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from Nov 2022 to Dec 2022. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded M1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/prometheus/exporter-toolkit vulnerabilities

Vulert verdict on github.com/prometheus/exporter-toolkit v0.20.0 i

Updated on 23 Oct 2026

Action needed: v0.20.0 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 78/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Moderate

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.20.0 — affected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 02 Dec 2022 i
  • Highest CVSS 6.2 i
  • With no published fix 0 i
  • Stars 311 i
  • OpenSSF scorecard 5/10 i
  • Last release this month i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/prometheus/exporter-toolkit, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.20.1-0.20261022194256-9bd6ebbacbb6 22 Oct 2026 M1 U1 Apache-2.0 Yes Details →
v0.20.1-0.20261016085135-13b2eb127ad1 16 Oct 2026 M1 U1 Apache-2.0 Yes Details →
v0.20.1-0.20261010064048-d4c9f37a5a9f 10 Oct 2026 M1 U1 Apache-2.0 Yes Details →
v0.20.1-0.20261003203638-49b83e892f9a 03 Oct 2026 M1 U1 Apache-2.0 Yes Details →
v0.20.0 24 Sep 2026 M1 U1 Apache-2.0 Yes Details →
v0.19.1-0.20260921152433-e828bf78f98e 21 Sep 2026 M1 U1 Apache-2.0 Yes Details →
v0.19.0 25 Aug 2026 M1 U1 Apache-2.0 Yes Details →
v0.17.2-0.20260806071751-dbe884623f5d 06 Aug 2026 M1 U1 Apache-2.0 Yes Details →
v0.18.0 06 Aug 2026 M1 U1 Apache-2.0 Yes Details →
v0.17.2-0.20260723130801-19a7c2d590c5 23 Jul 2026 M1 U1 Apache-2.0 Yes Details →
v0.17.1 01 Jul 2026 M1 U1 Apache-2.0 Yes Details →
v0.16.1-0.20260629134717-0d4d13161e81 29 Jun 2026 M1 U1 Apache-2.0 Yes Details →
v0.17.0 29 Jun 2026 M1 U1 Apache-2.0 Yes Details →
v0.16.1-0.20260623062410-a2f76ba8097d 23 Jun 2026 M1 U1 Apache-2.0 Yes Details →
v0.16.1-0.20260602053226-23ad7fa79c97 02 Jun 2026 M1 U1 Apache-2.0 Yes Details →
v0.16.1-0.20260515042858-176749f2fece 15 May 2026 M1 U1 Apache-2.0 Yes Details →
v0.15.2-0.20260329123440-a2642ec62ddf 29 Mar 2026 M1 U1 Apache-2.0 Yes Details →
v0.16.0 29 Mar 2026 M1 U1 Apache-2.0 Yes Details →
v0.15.1 01 Jan 2026 M1 U1 Apache-2.0 Yes Details →
v0.15.1-0.20251201154057-260341667896 01 Dec 2025 M1 U1 Apache-2.0 Yes Details →
v0.15.1-0.20251120075502-62924a8914a7 20 Nov 2025 M1 U1 Apache-2.0 Yes Details →
v0.15.1-0.20251101095950-8da41e688fd0 01 Nov 2025 M1 U1 Apache-2.0 Yes Details →
v0.15.0 23 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v0.0.0-20250905133654-efac154b2d03 05 Sep 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.2-0.20250905133654-efac154b2d03 05 Sep 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1 05 Sep 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250715210321-df20581e48ab 15 Jul 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250715064851-0b905819ea65 15 Jul 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250714080118-060315688e07 14 Jul 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250701113632-e81590d843ba 01 Jul 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250612184318-fb7682afee81 12 Jun 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250612064508-72778fadc7ad 12 Jun 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250425094706-e14e654a782f 25 Apr 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250417165853-3752e3877178 17 Apr 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250401173800-518a2d139216 01 Apr 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250323155441-5b2bf78a0dc1 23 Mar 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250308140238-e447885d5e3d 08 Mar 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250302195317-3a0b6591cb74 02 Mar 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250219204636-b07a15bd89be 19 Feb 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.1-0.20250209081728-694304616864 09 Feb 2025 M1 U1 Apache-2.0 Yes Details →
v0.14.0 06 Feb 2025 M1 U1 Apache-2.0 Yes Details →
v0.13.3-0.20250117114538-9a0befe12e9a 17 Jan 2025 M1 U1 Apache-2.0 Yes Details →
v0.13.3-0.20250116090913-574d848c091d 16 Jan 2025 M1 U1 Apache-2.0 Yes Details →
v0.13.3-0.20241229181741-8ecbde9bf1b7 29 Dec 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.2 13 Dec 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.2-0.20241112182336-03bc5df704d8 12 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.2-0.20241108185216-05185c0931d8 08 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.2-0.20241031113205-60ab7be44b32 31 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.2-0.20241030074723-fc2c8747a9f5 30 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.1 29 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.1-0.20241029163120-35b728ef3b47 29 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.1-0.20241029163107-045ec3a6b63b 29 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v0.13.0 09 Sep 2024 M1 U1 Apache-2.0 Yes Details →
v0.12.1-0.20240909111842-d0e3731b4a8a 09 Sep 2024 M1 U1 Apache-2.0 Yes Details →
v0.12.1-0.20240909070424-86bfc1ddfee1 09 Sep 2024 M1 U1 Apache-2.0 Yes Details →
v0.12.0 03 Sep 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240901093755-7a990a761763 01 Sep 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240901093118-27e07f00676f 01 Sep 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240823101624-61beb2cb9c21 23 Aug 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240822174821-54d40a862923 22 Aug 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240822174413-f6b9ed72d95e 22 Aug 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240816142342-74e013b4946d 16 Aug 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240809174840-7979004a1e8d 09 Aug 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240807165552-0ed404dd3cf1 07 Aug 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240802064146-e1326d988b65 02 Aug 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240801090343-3c3217ef25d8 01 Aug 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240717011307-305d484538c4 17 Jul 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240716093944-00f776b995ad 16 Jul 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240502181937-c4d02a742eb8 02 May 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240419142854-7eb051ea3de0 19 Apr 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240401092246-76680a47b2e3 01 Apr 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240324182225-98cdf8c98b7f 24 Mar 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240324122903-5cab82463d22 24 Mar 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240318165736-df43c8ea6c9b 18 Mar 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240227104651-937b897bca91 27 Feb 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240226194515-098e669dc2d3 26 Feb 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240208221322-57db9f4df9fe 08 Feb 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240206174926-aca63d8e4005 06 Feb 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240201143936-e06888446d8f 01 Feb 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240201140958-a5e9c81aaad6 01 Feb 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240116121209-3f0df9ed8ef4 16 Jan 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20240108174830-988303c2ae32 08 Jan 2024 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20231221181656-d6919daf24ee 21 Dec 2023 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20231220215709-76c3ae19528f 20 Dec 2023 M1 U1 Apache-2.0 Yes Details →
v0.0.0-20231219201944-da3e6589e713 19 Dec 2023 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20231219201944-da3e6589e713 19 Dec 2023 M1 U1 Apache-2.0 Yes Details →
v0.11.1-0.20231219195438-32eb7951f215 19 Dec 2023 M1 U1 Apache-2.0 Yes Details →
v0.11.0 09 Dec 2023 M1 U1 Apache-2.0 Yes Details →
v0.10.1-0.20231208230743-dd29c3aaf6e7 08 Dec 2023 M1 U1 Apache-2.0 Yes Details →
v0.10.1-0.20231205074928-5a3e1a8ff689 05 Dec 2023 M1 U1 Apache-2.0 Yes Details →
v0.10.1-0.20231205073824-4add345f38ef 05 Dec 2023 M1 U1 Apache-2.0 Yes Details →
v0.10.1-0.20231012142952-c850f72fa5a1 12 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.10.1-0.20231011223044-01d62cffc606 11 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.10.1-0.20231004175306-3ac25a4492f0 04 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.10.1-0.20231001094616-f7f400189835 01 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.10.1-0.20231001082347-5fb0f00c313a 01 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v0.10.1-0.20230902184741-f84ee377d421 02 Sep 2023 M1 U1 Apache-2.0 Yes Details →
v0.10.1-0.20230816120503-e26aafa966f8 16 Aug 2023 M1 U1 Apache-2.0 Yes Details →
v0.10.1-0.20230801093349-7b3c67e3746a 01 Aug 2023 M1 U1 Apache-2.0 Yes Details →
v0.10.1-0.20230801081605-6dfe9f01b8a2 01 Aug 2023 M1 U1 Apache-2.0 Yes Details →
v0.10.1-0.20230714054209-2f4150c63f97 14 Jul 2023 M1 U1 — Yes Details →
v0.10.1-0.20230714053456-0a37859a2cbe 14 Jul 2023 M1 U1 — Yes Details →
v0.10.1-0.20230701082814-b82d0134ab35 01 Jul 2023 M1 U1 — Yes Details →
v0.10.1-0.20230627175040-46a5f7e74b1d 27 Jun 2023 M1 U1 — Yes Details →
v0.10.1-0.20230619110904-c72988b8e66a 19 Jun 2023 M1 U1 — Yes Details →
v0.10.1-0.20230614121829-2d00d7b30005 14 Jun 2023 M1 U1 — Yes Details →
v0.10.1-0.20230614121829-448bd14770a7 14 Jun 2023 M1 U1 — Yes Details →
v0.0.0-20230601093608-429053ffdcae 01 Jun 2023 M1 U1 — Yes Details →
v0.10.1-0.20230601093608-429053ffdcae 01 Jun 2023 M1 U1 — Yes Details →
v0.10.1-0.20230601085739-07b307a095d7 01 Jun 2023 M1 U1 — Yes Details →
v0.0.0-20230501175630-a7dd21803d17 01 May 2023 M1 U1 — Yes Details →
v0.10.0 01 May 2023 M1 U1 — Yes Details →
v0.0.0-20230407130133-47811e7ccd67 07 Apr 2023 M1 U1 — Yes Details →
v0.9.2-0.20230407130133-47811e7ccd67 07 Apr 2023 M1 U1 — Yes Details →
v0.9.2-0.20230405082543-b059844fe86a 05 Apr 2023 M1 U1 — Yes Details →
v0.9.2-0.20230401093829-22a4c39aa058 01 Apr 2023 M1 U1 — Yes Details →
v0.9.2-0.20230330055121-f42e5c79e30e 30 Mar 2023 M1 U1 — Yes Details →
v0.9.2-0.20230325140115-5526383de625 25 Mar 2023 M1 U1 — Yes Details →
v0.9.2-0.20230325130527-feef77d71811 25 Mar 2023 M1 U1 — Yes Details →
v0.9.2-0.20230325113614-9165b70cac72 25 Mar 2023 M1 U1 — Yes Details →

The newest 120 of 220 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/prometheus/exporter-toolkit

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2022-46146: Prometheus Exporter-Toolkit Authentication Bypass 6.2 medium 0.7.2 02 Dec 2022
CVE-2022-46146: Authentication bypass in github.com/prometheus/exporter-toolkit N/A unrated 0.7.2 29 Nov 2022

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/prometheus/exporter-toolkit

Is github.com/prometheus/exporter-toolkit safe to use?

Vulert records 2 vulnerabilities for github.com/prometheus/exporter-toolkit in Go: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/prometheus/exporter-toolkit's Vulert package health score?

Vulert scores github.com/prometheus/exporter-toolkit 78/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/prometheus/exporter-toolkit affected?

Yes. v0.20.0, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/prometheus/exporter-toolkit should I use?

v0.20.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/prometheus/exporter-toolkit have?

2 vulnerabilities are recorded for github.com/prometheus/exporter-toolkit in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/prometheus/exporter-toolkit vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/prometheus/exporter-toolkit in the last 12 months, and the oldest entry in this database dates to 29 Nov 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/prometheus/exporter-toolkit are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/prometheus/exporter-toolkit for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/prometheus/exporter-toolkit version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.