Vulnerability Database · Go · Package report
github.com/pulumi/pulumi/sdk/v3: vulnerability history, versions and safety
github.com/pulumi/pulumi/sdk/v3 is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/pulumi/pulumi/sdk/v3 v3.272.0 i
Updated on 23 Oct 2026
Good news: v3.272.0, the version you would install today, has no known vulnerabilities.
- Security No known security issues
- Maintenance Sustainable
- Popularity Key ecosystem project
- Community Moderate
What to do: Stay on v3.272.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v3.272.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v3.272.0 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 25,805 i
- OpenSSF scorecard 6/10 i
- Last release this month i
- Licence MIT i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/pulumi/pulumi/sdk/v3, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v3.272.1-0.20261023085637-14dad6f974f8 23 Oct 2026
- v3.272.1-0.20261023082428-bfda56054522 23 Oct 2026
- v3.272.1-0.20261022232654-e87e613e9767 22 Oct 2026
- v3.272.1-0.20261022220754-7439dca2b79a 22 Oct 2026
- v3.272.1-0.20261022201418-4610a109a947 22 Oct 2026
- v3.271.1-0.20261022184643-8a99ec577bc3 22 Oct 2026
- v3.272.0 22 Oct 2026
- v3.271.1-0.20261022170418-701581d4229d 22 Oct 2026
- v3.271.1-0.20261022150640-2e7fe6fea8f5 22 Oct 2026
- v3.271.1-0.20261022144841-312a661162d5 22 Oct 2026
- v3.271.1-0.20261022095531-910c80d9784f 22 Oct 2026
- v3.271.1-0.20261021225346-7847d654e336 21 Oct 2026
- v3.271.1-0.20261021205241-01f96d3e45c8 21 Oct 2026
- v3.271.1-0.20261021201620-4fcf8f263d3c 21 Oct 2026
- v3.271.1-0.20261021190933-1a366becdb62 21 Oct 2026
- v3.271.1-0.20261021180255-3b3c825e3590 21 Oct 2026
- v3.270.1-0.20261021171653-144415e09849 21 Oct 2026
- v3.270.1-0.20261021141007-a20fadfe821e 21 Oct 2026
- v3.271.1-0.20261021141007-a20fadfe821e 21 Oct 2026
- v3.271.0 21 Oct 2026
- v3.270.1-0.20261021084046-91f148c80c87 21 Oct 2026
- v3.270.1-0.20261020213300-2dfeb5294c80 20 Oct 2026
- v3.270.1-0.20261020145146-4e1c620efb12 20 Oct 2026
- v3.270.1-0.20261020130116-88815ac16756 20 Oct 2026
- v3.270.1-0.20261020105315-866cafbe4a99 20 Oct 2026
- v3.270.1-0.20261020082657-a569443bc477 20 Oct 2026
- v3.270.1-0.20261020071617-29b64edea831 20 Oct 2026
- v3.270.1-0.20261019162935-7732a4d773f7 19 Oct 2026
- v3.270.1-0.20261019154339-6c60436aac2c 19 Oct 2026
- v3.270.1-0.20261019125422-55676740ffb2 19 Oct 2026
- v3.270.1-0.20261019121354-b95d0b2fcd22 19 Oct 2026
- v3.270.1-0.20261019110833-a83416bd5616 19 Oct 2026
- v3.270.1-0.20261019082419-89cf4605b499 19 Oct 2026
- v3.270.1-0.20261017065017-b9e87ddf20c4 17 Oct 2026
- v3.270.1-0.20261016212635-7b4b596ff7b6 16 Oct 2026
- v3.270.1-0.20261016191527-1e1d198b1cf4 16 Oct 2026
- v3.269.1-0.20261016182630-4162541bb475 16 Oct 2026
- v3.270.0 16 Oct 2026
- v3.269.1-0.20261016151859-a02182c69401 16 Oct 2026
- v3.269.1-0.20261016104244-c7569faeb021 16 Oct 2026
- v3.268.1-0.20261016061519-9dfd2db85d1d 16 Oct 2026
- v3.268.1-0.20261016043319-1109c336db22 16 Oct 2026
- v3.267.1-0.20261016011731-df299176e6f4 16 Oct 2026
- v3.268.1-0.20261016005852-bb439153aa4f 16 Oct 2026
- v3.268.1-0.20261015185430-69b077aef18f 15 Oct 2026
- v3.268.1-0.20261015144336-ce4b50287944 15 Oct 2026
- v3.268.1-0.20261015112509-83e06ed8da82 15 Oct 2026
- v3.268.1-0.20261015101546-736e881332c8 15 Oct 2026
- v3.268.1-0.20261014112857-4df2dc00998b 14 Oct 2026
- v3.269.1-0.20261014112857-4df2dc00998b 14 Oct 2026
- v3.268.1-0.20261014103105-9e5bc02b2a8b 14 Oct 2026
- v3.269.0 14 Oct 2026
- v3.268.1-0.20261014072156-95c0b71a9fb9 14 Oct 2026
- v3.268.1-0.20261013213500-adbb8a8e7a49 13 Oct 2026
- v3.267.1-0.20261013212704-97cf07198f34 13 Oct 2026
- v3.268.1-0.20261013204547-ebd502092cbf 13 Oct 2026
- v3.268.1-0.20261013182223-93d24e00aaa6 13 Oct 2026
- v3.268.1-0.20261013172105-1c505cf1b9d0 13 Oct 2026
- v3.268.1-0.20261009175711-2255563bcc6b 09 Oct 2026
- v3.268.1-0.20261009170032-a65f8384bd3a 09 Oct 2026
- v3.268.1-0.20261009152940-f58c751f39ca 09 Oct 2026
- v3.268.1-0.20261009142908-89facf2100c3 09 Oct 2026
- v3.268.1-0.20261009121937-e6999770a8c7 09 Oct 2026
- v3.268.1-0.20261009103228-b30fd9719e9a 09 Oct 2026
- v3.268.1-0.20261008164205-78733ea03336 08 Oct 2026
- v3.268.1-0.20261008162615-eabf1b612143 08 Oct 2026
- v3.268.1-0.20261008135651-caaa4fd601e9 08 Oct 2026
- v3.268.1-0.20261008122555-66fad6029fee 08 Oct 2026
- v3.268.1-0.20261008104121-4f844c41336e 08 Oct 2026
- v3.268.1-0.20261008091521-b90d764ba99c 08 Oct 2026
- v3.268.1-0.20261008071338-c9d89851a2a4 08 Oct 2026
- v3.268.1-0.20261008030157-039c6fcbe612 08 Oct 2026
- v3.267.1-0.20261007213733-ac3d2629db58 07 Oct 2026
- v3.268.1-0.20261007151648-887e0dd5cba3 07 Oct 2026
- v3.263.1-0.20261007131504-2d95ec8a080a 07 Oct 2026
- v3.268.1-0.20261007090402-0a75b9e08913 07 Oct 2026
- v3.268.0 07 Oct 2026
- v3.267.1-0.20261007083523-24b14e774d16 07 Oct 2026
- v3.267.1-0.20261006151838-64298bcf1b63 06 Oct 2026
- v3.267.1-0.20261006090338-3a669dedfdd4 06 Oct 2026
- v3.267.1-0.20261006081936-24e1ad871212 06 Oct 2026
- v3.267.1-0.20261005215340-2f6023c26cbf 05 Oct 2026
- v3.267.1-0.20261005150002-059b146050a7 05 Oct 2026
- v3.267.1-0.20261005143410-2b876b958a8f 05 Oct 2026
- v3.267.1-0.20261005132414-1c1d46606516 05 Oct 2026
- v3.267.1-0.20261005103532-dac138d9aef9 05 Oct 2026
- v3.267.1-0.20261005094459-fa4b08f43a00 05 Oct 2026
- v3.267.1-0.20261005083856-3c9dfdc0f316 05 Oct 2026
- v3.267.1-0.20261003092947-bdfa394093f6 03 Oct 2026
- v3.267.1-0.20261003013007-e4ea4dc674b8 03 Oct 2026
- v3.267.1-0.20261002181713-8489d0b1b7c5 02 Oct 2026
- v3.267.1-0.20261002152021-2265f57d5241 02 Oct 2026
- v3.267.1-0.20261002141124-a0416a35e1f6 02 Oct 2026
- v3.267.1-0.20261002132526-fcd2513c340f 02 Oct 2026
- v3.267.1-0.20261002120650-38868cc5862d 02 Oct 2026
- v3.267.1-0.20261002105313-a70ddf98825f 02 Oct 2026
- v3.267.1-0.20261002001503-01c8ae4ece5b 02 Oct 2026
- v3.267.1-0.20261001183908-fb0efa39bc56 01 Oct 2026
- v3.267.1-0.20261001152717-8352b6daaf01 01 Oct 2026
- v3.267.1-0.20261001152014-dcd92669ad4e 01 Oct 2026
- v3.267.1-0.20261001140013-f6c3028b9b97 01 Oct 2026
- v3.267.1-0.20261001094949-1d3c0bbbf47c 01 Oct 2026
- v3.267.0 01 Oct 2026
- v3.266.1-0.20260930193748-fd80abddaeaf 30 Sep 2026
- v3.266.1-0.20260930171823-7b07107d67b5 30 Sep 2026
- v3.266.1-0.20260930133519-b87d12153b7d 30 Sep 2026
- v3.266.1-0.20260930090336-e801eb0529bc 30 Sep 2026
- v3.266.0 30 Sep 2026
- v3.265.1-0.20260930084023-0cb5418f9b52 30 Sep 2026
- v3.265.1-0.20260929104429-6e03a45e7eab 29 Sep 2026
- v3.265.1-0.20260928203336-e8b4ba5b4a9e 28 Sep 2026
- v3.265.1-0.20260928140447-846419749829 28 Sep 2026
- v3.265.1-0.20260928093252-243d4fa7eec8 28 Sep 2026
- v3.265.1-0.20260928083548-01f1e2af0f8a 28 Sep 2026
- v3.265.1-0.20260927222045-b5e2d2ca611d 27 Sep 2026
- v3.265.1-0.20260925232945-66dcbb675cc7 25 Sep 2026
- v3.265.1-0.20260925185921-506b7a854b3a 25 Sep 2026
- v3.265.0 25 Sep 2026
- v3.264.1-0.20260925124252-f41ca5898ff5 25 Sep 2026
- v3.264.1-0.20260925122919-48a9bd5d653f 25 Sep 2026
The newest 120 of 6,099 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/pulumi/pulumi/sdk/v3
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/pulumi/pulumi/sdk/v3
Is github.com/pulumi/pulumi/sdk/v3 safe to use?
Vulert has no vulnerabilities on record for github.com/pulumi/pulumi/sdk/v3 in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/pulumi/pulumi/sdk/v3's Vulert package health score?
Vulert scores github.com/pulumi/pulumi/sdk/v3 92/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/pulumi/pulumi/sdk/v3 affected?
No. v3.272.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
How many vulnerabilities does github.com/pulumi/pulumi/sdk/v3 have?
0 vulnerabilities are recorded for github.com/pulumi/pulumi/sdk/v3 in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/pulumi/pulumi/sdk/v3 vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/pulumi/pulumi/sdk/v3 in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/pulumi/pulumi/sdk/v3 are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/pulumi/pulumi/sdk/v3 for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/pulumi/pulumi/sdk/v3 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.