Vulnerability Database · Go · Package report

github.com/protobom/protobom: vulnerability history, versions and safety

github.com/protobom/protobom is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

Vulert verdict on github.com/protobom/protobom v0.6.2 i

Updated on 23 Oct 2026

Good news: v0.6.2, the version you would install today, has no known vulnerabilities.

Package health score 82/100
  • Security No known security issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Quiet

What to do: Stay on v0.6.2 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.6.2 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v0.6.2 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 337 i
  • Last release 1 month ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/protobom/protobom, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.6.3-0.20261015204524-c9079d628e31 15 Oct 2026 none Apache-2.0 — Details →
v0.6.3-0.20260921145726-22510c5720fd 21 Sep 2026 none Apache-2.0 — Details →
v0.6.2 21 Sep 2026 none Apache-2.0 — Details →
v0.6.2-0.20260918013909-728e43bc61b1 18 Sep 2026 none Apache-2.0 — Details →
v0.6.2-0.20260901022845-e228d3e72a60 01 Sep 2026 none Apache-2.0 — Details →
v0.6.1 01 Sep 2026 none Apache-2.0 — Details →
v0.6.1-0.20260826185743-8b19772e1fac 26 Aug 2026 none Apache-2.0 — Details →
v0.6.0 26 Aug 2026 none Apache-2.0 — Details →
v0.5.9-0.20260826173917-54cf1a0d471f 26 Aug 2026 none Apache-2.0 — Details →
v0.5.9-0.20260818221512-58ae272d4c41 18 Aug 2026 none Apache-2.0 — Details →
v0.5.9-0.20260808221622-938f35bcd0da 08 Aug 2026 none Apache-2.0 — Details →
v0.5.9-0.20260721025613-f59e11bac255 21 Jul 2026 none Apache-2.0 — Details →
v0.5.9-0.20260713051312-4915c1ec5c04 13 Jul 2026 none Apache-2.0 — Details →
v0.5.8 01 Jul 2026 none Apache-2.0 — Details →
v0.5.8-0.20260701195610-4e19c954fd7a 01 Jul 2026 none Apache-2.0 — Details →
v0.5.7 01 Jul 2026 none Apache-2.0 — Details →
v0.5.6 04 Jun 2026 none Apache-2.0 — Details →
v0.5.6-0.20260420052123-fd106f299866 20 Apr 2026 none Apache-2.0 — Details →
v0.5.5 19 Apr 2026 none Apache-2.0 — Details →
v0.5.5-0.20260419033848-cbf169ef91f0 19 Apr 2026 none Apache-2.0 — Details →
v0.5.5-0.20260417135614-268107bcc0d0 17 Apr 2026 none Apache-2.0 — Details →
v0.5.5-0.20260415185228-dd5c685f19a6 15 Apr 2026 none Apache-2.0 — Details →
v0.5.5-0.20260406012020-3a0e70566711 06 Apr 2026 none Apache-2.0 — Details →
v0.5.5-0.20260302232241-79adde209503 02 Mar 2026 none Apache-2.0 — Details →
v0.5.5-0.20260210040700-834e5fd12ae2 10 Feb 2026 none Apache-2.0 — Details →
v0.5.5-0.20260112144058-f5e2425fccc5 12 Jan 2026 none Apache-2.0 — Details →
v0.5.5-0.20260109193753-af6ae8e2b33e 09 Jan 2026 none Apache-2.0 — Details →
v0.5.5-0.20251110084405-b4fc043eb1da 10 Nov 2025 none Apache-2.0 — Details →
v0.5.5-0.20251017154309-db660a853df3 17 Oct 2025 none Apache-2.0 — Details →
v0.5.5-0.20250910160549-3e0df2be8c69 10 Sep 2025 none Apache-2.0 — Details →
v0.5.5-0.20250816072010-868d15dd419d 16 Aug 2025 none Apache-2.0 — Details →
v0.5.4 13 Aug 2025 none Apache-2.0 — Details →
v0.5.3 13 Aug 2025 none Apache-2.0 — Details →
v0.5.3-0.20250809084814-0145cd3b6fc8 09 Aug 2025 none Apache-2.0 — Details →
v0.5.3-0.20250716165949-a6da35960326 16 Jul 2025 none Apache-2.0 — Details →
v0.5.3-0.20250710175516-db4029ecde3b 10 Jul 2025 none Apache-2.0 — Details →
v0.5.3-0.20250707200531-a4d147e71538 07 Jul 2025 none Apache-2.0 — Details →
v0.5.3-0.20250529204200-0c0cd4ce5fa4 29 May 2025 none Apache-2.0 — Details →
v0.5.3-0.20250512060156-7f17973ffffa 12 May 2025 none Apache-2.0 — Details →
v0.5.3-0.20250317031408-8c5ee7c0f5d2 17 Mar 2025 none Apache-2.0 — Details →
v0.5.2 04 Mar 2025 none Apache-2.0 — Details →
v0.5.2-0.20250302073428-3e3b43744b10 02 Mar 2025 none Apache-2.0 — Details →
v0.5.2-0.20250224074831-5612e368b95d 24 Feb 2025 none Apache-2.0 — Details →
v0.5.1 21 Feb 2025 none Apache-2.0 — Details →
v0.5.1-0.20250218173952-0aa9659c6dc7 18 Feb 2025 none Apache-2.0 — Details →
v0.5.1-0.20250217154332-3a7bcc1ca02a 17 Feb 2025 none Apache-2.0 — Details →
v0.5.1-0.20241105215135-33ab6ef0c985 05 Nov 2024 none Apache-2.0 — Details →
v0.5.0 04 Nov 2024 none Apache-2.0 — Details →
v0.4.5-0.20241031170812-4c8262ccbd8a 31 Oct 2024 none Apache-2.0 — Details →
v0.4.5-0.20241031072630-3d94feb2c5dd 31 Oct 2024 none Apache-2.0 — Details →
v0.4.5-0.20241030171820-071ead82cbe1 30 Oct 2024 none Apache-2.0 — Details →
v0.4.5-0.20241015231759-a4fe8f368f6d 15 Oct 2024 none Apache-2.0 — Details →
v0.4.5-0.20241008180511-1aab8c71f730 08 Oct 2024 none Apache-2.0 — Details →
v0.4.5-0.20241008175252-ab401ce6c8e6 08 Oct 2024 none Apache-2.0 — Details →
v0.4.4 07 Oct 2024 none Apache-2.0 — Details →
v0.4.4-0.20241007193558-5ec685d8b17a 07 Oct 2024 none Apache-2.0 — Details →
v0.4.4-0.20240930071730-5e3447ad3d64 30 Sep 2024 none Apache-2.0 — Details →
v0.4.4-0.20240805125232-77dcacf17489 05 Aug 2024 none Apache-2.0 — Details →
v0.4.4-0.20240715075440-4701de3c4d2f 15 Jul 2024 none Apache-2.0 — Details →
v0.4.4-0.20240711183543-6c6e6febdca8 11 Jul 2024 none Apache-2.0 — Details →
v0.4.4-0.20240702132053-86d02a918987 02 Jul 2024 none Apache-2.0 — Details →
v0.4.3 10 Jun 2024 none Apache-2.0 — Details →
v0.4.2 30 May 2024 none Apache-2.0 — Details →
v0.4.2-0.20240522193138-bd841435b005 22 May 2024 none Apache-2.0 — Details →
v0.4.1 13 May 2024 none Apache-2.0 — Details →
v0.3.1-0.20240508214902-8e47a21ca3e4 08 May 2024 none Apache-2.0 — Details →
v0.4.0 08 May 2024 none Apache-2.0 — Details →

All 67 versions Vulert tracks for this package. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/protobom/protobom

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/protobom/protobom

Is github.com/protobom/protobom safe to use?

Vulert has no vulnerabilities on record for github.com/protobom/protobom in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/protobom/protobom's Vulert package health score?

Vulert scores github.com/protobom/protobom 82/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/protobom/protobom affected?

No. v0.6.2, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of github.com/protobom/protobom should I use?

v0.6.2 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/protobom/protobom have?

0 vulnerabilities are recorded for github.com/protobom/protobom in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/protobom/protobom vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/protobom/protobom in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/protobom/protobom are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/protobom/protobom for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/protobom/protobom version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.