Vulnerability Database · Go · Package report
github.com/pulumi/pulumi/pkg/v3: vulnerability history, versions and safety
github.com/pulumi/pulumi/pkg/v3 is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/pulumi/pulumi/pkg/v3 v3.272.0 i
Updated on 23 Oct 2026
Good news: v3.272.0, the version you would install today, has no known vulnerabilities.
- Security No known security issues
- Maintenance Sustainable
- Popularity Key ecosystem project
- Community Moderate
What to do: Stay on v3.272.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v3.272.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v3.272.0 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 25,805 i
- OpenSSF scorecard 6/10 i
- Last release this month i
- Licence Apache-2.0 i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/pulumi/pulumi/pkg/v3, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v3.272.1-0.20261023085637-14dad6f974f8 23 Oct 2026
- v3.272.1-0.20261022232654-e87e613e9767 22 Oct 2026
- v3.272.0 22 Oct 2026
- v3.271.1-0.20261022201418-4610a109a947 22 Oct 2026
- v3.271.1-0.20261022184643-8a99ec577bc3 22 Oct 2026
- v3.271.1-0.20261022170418-701581d4229d 22 Oct 2026
- v3.271.1-0.20261022150640-2e7fe6fea8f5 22 Oct 2026
- v3.271.1-0.20261022144841-312a661162d5 22 Oct 2026
- v3.271.1-0.20261022095531-910c80d9784f 22 Oct 2026
- v3.271.1-0.20261022084901-c17c1679ad10 22 Oct 2026
- v3.271.1-0.20261021225346-7847d654e336 21 Oct 2026
- v3.271.1-0.20261021205241-01f96d3e45c8 21 Oct 2026
- v3.271.1-0.20261021201620-4fcf8f263d3c 21 Oct 2026
- v3.271.1-0.20261021190933-1a366becdb62 21 Oct 2026
- v3.271.1-0.20261021184845-4cd9ba706132 21 Oct 2026
- v3.271.0 21 Oct 2026
- v3.270.1-0.20261021171653-144415e09849 21 Oct 2026
- v3.270.1-0.20261021134046-082147399d27 21 Oct 2026
- v3.270.1-0.20261021084046-91f148c80c87 21 Oct 2026
- v3.270.1-0.20261020213300-2dfeb5294c80 20 Oct 2026
- v3.270.1-0.20261020145146-4e1c620efb12 20 Oct 2026
- v3.270.1-0.20261020130116-88815ac16756 20 Oct 2026
- v3.270.1-0.20261020105315-866cafbe4a99 20 Oct 2026
- v3.270.1-0.20261020084530-1ae86eef58a0 20 Oct 2026
- v3.270.1-0.20261019162935-7732a4d773f7 19 Oct 2026
- v3.270.1-0.20261019154339-6c60436aac2c 19 Oct 2026
- v3.270.1-0.20261019125422-55676740ffb2 19 Oct 2026
- v3.270.1-0.20261019121354-b95d0b2fcd22 19 Oct 2026
- v3.270.1-0.20261019110833-a83416bd5616 19 Oct 2026
- v3.270.1-0.20261017065017-b9e87ddf20c4 17 Oct 2026
- v3.270.0 16 Oct 2026
- v3.269.1-0.20261016191527-1e1d198b1cf4 16 Oct 2026
- v3.269.1-0.20261016182630-4162541bb475 16 Oct 2026
- v3.269.1-0.20261016151859-a02182c69401 16 Oct 2026
- v3.269.1-0.20261016133822-a8f99f110ecc 16 Oct 2026
- v3.269.0 16 Oct 2026
- v3.268.1-0.20261016104244-c7569faeb021 16 Oct 2026
- v3.268.1-0.20261016095511-194c65d84267 16 Oct 2026
- v3.268.1-0.20261016061519-9dfd2db85d1d 16 Oct 2026
- v3.268.1-0.20261016060332-ddb7458d1a0a 16 Oct 2026
- v3.268.1-0.20261016060319-4e9f82d6dbb4 16 Oct 2026
- v3.268.1-0.20261016043319-1109c336db22 16 Oct 2026
- v3.267.1-0.20261016011731-df299176e6f4 16 Oct 2026
- v3.268.1-0.20261016005852-bb439153aa4f 16 Oct 2026
- v3.268.1-0.20261015185430-69b077aef18f 15 Oct 2026
- v3.268.1-0.20261015144336-ce4b50287944 15 Oct 2026
- v3.268.1-0.20261015112509-83e06ed8da82 15 Oct 2026
- v3.268.1-0.20261015101546-736e881332c8 15 Oct 2026
- v3.268.1-0.20261015092613-7729547c5e93 15 Oct 2026
- v3.268.1-0.20261014112857-4df2dc00998b 14 Oct 2026
- v3.268.1-0.20261014103105-9e5bc02b2a8b 14 Oct 2026
- v3.268.1-0.20261014093259-cb37065b8b1c 14 Oct 2026
- v3.268.1-0.20261014072156-95c0b71a9fb9 14 Oct 2026
- v3.268.1-0.20261013213500-adbb8a8e7a49 13 Oct 2026
- v3.267.1-0.20261013212704-97cf07198f34 13 Oct 2026
- v3.268.1-0.20261013204547-ebd502092cbf 13 Oct 2026
- v3.268.1-0.20261013182223-93d24e00aaa6 13 Oct 2026
- v3.268.1-0.20261013172105-1c505cf1b9d0 13 Oct 2026
- v3.268.1-0.20261009175711-2255563bcc6b 09 Oct 2026
- v3.268.1-0.20261009170032-a65f8384bd3a 09 Oct 2026
- v3.268.1-0.20261009142908-89facf2100c3 09 Oct 2026
- v3.268.1-0.20261009121937-e6999770a8c7 09 Oct 2026
- v3.268.1-0.20261009103228-b30fd9719e9a 09 Oct 2026
- v3.268.1-0.20261008164205-78733ea03336 08 Oct 2026
- v3.268.1-0.20261008135651-caaa4fd601e9 08 Oct 2026
- v3.268.1-0.20261008122555-66fad6029fee 08 Oct 2026
- v3.268.1-0.20261008030157-039c6fcbe612 08 Oct 2026
- v3.267.1-0.20261007213733-ac3d2629db58 07 Oct 2026
- v3.268.1-0.20261007151648-887e0dd5cba3 07 Oct 2026
- v3.263.1-0.20261007131504-2d95ec8a080a 07 Oct 2026
- v3.268.0 07 Oct 2026
- v3.267.1-0.20261007090402-0a75b9e08913 07 Oct 2026
- v3.267.1-0.20261006151838-64298bcf1b63 06 Oct 2026
- v3.267.1-0.20261005215340-2f6023c26cbf 05 Oct 2026
- v3.267.1-0.20261005150002-059b146050a7 05 Oct 2026
- v3.267.1-0.20261005143410-2b876b958a8f 05 Oct 2026
- v3.267.1-0.20261005132414-1c1d46606516 05 Oct 2026
- v3.267.1-0.20261005094459-fa4b08f43a00 05 Oct 2026
- v3.267.1-0.20261003092947-bdfa394093f6 03 Oct 2026
- v3.267.1-0.20261003013007-e4ea4dc674b8 03 Oct 2026
- v3.267.1-0.20261002181713-8489d0b1b7c5 02 Oct 2026
- v3.267.1-0.20261002001503-01c8ae4ece5b 02 Oct 2026
- v3.267.1-0.20261001152717-8352b6daaf01 01 Oct 2026
- v3.267.1-0.20261001140013-f6c3028b9b97 01 Oct 2026
- v3.267.0 01 Oct 2026
- v3.266.1-0.20260930193748-fd80abddaeaf 30 Sep 2026
- v3.266.1-0.20260930171823-7b07107d67b5 30 Sep 2026
- v3.266.1-0.20260930133519-b87d12153b7d 30 Sep 2026
- v3.266.1-0.20260930132814-db45d040c853 30 Sep 2026
- v3.266.0 30 Sep 2026
- v3.265.1-0.20260929104429-6e03a45e7eab 29 Sep 2026
- v3.265.1-0.20260928203336-e8b4ba5b4a9e 28 Sep 2026
- v3.265.1-0.20260927222045-b5e2d2ca611d 27 Sep 2026
- v3.265.0 25 Sep 2026
- v3.264.1-0.20260925122919-48a9bd5d653f 25 Sep 2026
- v3.264.1-0.20260925101001-c5eae056e937 25 Sep 2026
- v3.264.1-0.20260924154351-9913895671c2 24 Sep 2026
- v3.264.1-0.20260924153323-d221c341937f 24 Sep 2026
- v3.264.1-0.20260924124426-1713d6825a30 24 Sep 2026
- v3.264.1-0.20260924070141-714b42790bdb 24 Sep 2026
- v3.263.1-0.20260923215613-4b9055eb8309 23 Sep 2026
- v3.264.1-0.20260923183936-cc777a619005 23 Sep 2026
- v3.264.1-0.20260923150943-856296e55008 23 Sep 2026
- v3.264.0 23 Sep 2026
- v3.263.1-0.20260923090259-b2ddae0ee536 23 Sep 2026
- v3.263.1-0.20260923084046-32519795baa2 23 Sep 2026
- v3.261.1-0.20260922191951-2d08ca24f22b 22 Sep 2026
- v3.263.1-0.20260922172355-e49aa7a01117 22 Sep 2026
- v3.263.1-0.20260922143501-7b9e8fa366df 22 Sep 2026
- v3.263.1-0.20260922120302-4172ad821ea3 22 Sep 2026
- v3.263.1-0.20260922083416-5066bf9ff36f 22 Sep 2026
- v3.263.1-0.20260922063247-769aa46fd73a 22 Sep 2026
- v3.263.1-0.20260921204124-62143b9b73ea 21 Sep 2026
- v3.263.1-0.20260921155759-318be8455559 21 Sep 2026
- v3.263.1-0.20260921130634-e423a19b27df 21 Sep 2026
- v3.263.1-0.20260921125621-1e1cdb9a1823 21 Sep 2026
- v3.263.1-0.20260921120409-9947a832f6b6 21 Sep 2026
- v3.263.1-0.20260921094602-af5574231dd8 21 Sep 2026
- v3.263.1-0.20260921080403-1a2a8ea0b127 21 Sep 2026
- v3.263.1-0.20260920192306-a08c38f67957 20 Sep 2026
The newest 120 of 5,077 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/pulumi/pulumi/pkg/v3
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/pulumi/pulumi/pkg/v3
Is github.com/pulumi/pulumi/pkg/v3 safe to use?
Vulert has no vulnerabilities on record for github.com/pulumi/pulumi/pkg/v3 in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/pulumi/pulumi/pkg/v3's Vulert package health score?
Vulert scores github.com/pulumi/pulumi/pkg/v3 92/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/pulumi/pulumi/pkg/v3 affected?
No. v3.272.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
How many vulnerabilities does github.com/pulumi/pulumi/pkg/v3 have?
0 vulnerabilities are recorded for github.com/pulumi/pulumi/pkg/v3 in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/pulumi/pulumi/pkg/v3 vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/pulumi/pulumi/pkg/v3 in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/pulumi/pulumi/pkg/v3 are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/pulumi/pulumi/pkg/v3 for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/pulumi/pulumi/pkg/v3 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.