VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/pydio/cells: vulnerability history, versions and safety

github.com/pydio/cells is a package in the Go ecosystem. Vulert records 5 vulnerabilities for it across 120 releases, from May 2023 to Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
5 vulnerabilities recorded M2 U3
i
3 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/pydio/cells vulnerabilities

Vulert verdict on github.com/pydio/cells v3.0.9+incompatible i

Updated on 23 Oct 2026

Careful: v3.0.9+incompatible has 5 known vulnerabilities, and 3 have no fix yet. Use an earlier safe version, or the workaround listed for each one.

Package health score 60/100
  • Security Some issues to review
  • Maintenance Slowing
  • Popularity Key ecosystem project
  • Community Quiet

The current release has a vulnerability with no published fix, which caps this score.

What to do: Pin an earlier, unaffected release if you can, and apply the workaround each vulnerability lists until a fix is published. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v3.0.9+incompatible — affected i
  • Vulnerabilities on record 5 over 1 year · 0 in the last year i
  • Latest disclosure 21 Aug 2024 i
  • Highest CVSS 5.4 i
  • With no published fix 3 i
  • Stars 2,255 i
  • OpenSSF scorecard 2/10 i
  • Last release 51 months ago i
  • Licence AGPL-3.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/pydio/cells, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v3.0.9+incompatible 08 Jul 2022 M2 U3 AGPL-3.0 No Details →
v3.0.7+incompatible 04 May 2022 M2 U3 AGPL-3.0 No Details →
v3.0.6+incompatible 22 Mar 2022 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20220224100724-10b9878a8e2a 24 Feb 2022 M2 U3 AGPL-3.0 No Details →
v3.0.5-0.20220224100724-10b9878a8e2a+incompatible 24 Feb 2022 M2 U3 AGPL-3.0 No Details →
v3.0.5+incompatible 15 Feb 2022 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20220214182126-2be19d0ec7ec 14 Feb 2022 M2 U3 AGPL-3.0 No Details →
v3.0.5-0.20220214182126-2be19d0ec7ec+incompatible 14 Feb 2022 M2 U3 AGPL-3.0 No Details →
v3.0.1-0.20220205130458-4b4a0aae5848+incompatible 05 Feb 2022 M2 U3 AGPL-3.0 No Details →
v3.0.1-0.20220202133956-38aeed503ac6+incompatible 02 Feb 2022 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20220131105938-06a17b1b5ab0 31 Jan 2022 M2 U3 AGPL-3.0 No Details →
v3.0.5-0.20220131105938-06a17b1b5ab0+incompatible 31 Jan 2022 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20220128135028-c146b9406763 28 Jan 2022 M2 U3 AGPL-3.0 No Details →
v3.0.4+incompatible 28 Jan 2022 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20220126110426-21efbcd7f783 26 Jan 2022 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20220117101252-d72195e1dc13 17 Jan 2022 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20220115150629-ded04b9f5545 15 Jan 2022 M2 U3 AGPL-3.0 No Details →
v3.0.1-0.20211215151241-7b01876474b7+incompatible 15 Dec 2021 M2 U3 AGPL-3.0 No Details →
v3.0.1-0.20211208165341-4dc6a4e20324+incompatible 08 Dec 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211208155608-b19a98871795 08 Dec 2021 M2 U3 AGPL-3.0 No Details →
v3.0.4-0.20211208155608-b19a98871795+incompatible 08 Dec 2021 M2 U3 AGPL-3.0 No Details →
v3.0.1-0.20211208140329-3cbafb4d9b9a+incompatible 08 Dec 2021 M2 U3 AGPL-3.0 No Details →
v3.0.1-0.20211208124407-e7536b64e154+incompatible 08 Dec 2021 M2 U3 AGPL-3.0 No Details →
v3.0.1-0.20211206055933-616430863415+incompatible 06 Dec 2021 M2 U3 AGPL-3.0 No Details →
v3.0.1-0.20211203061500-ffd9860c96e4+incompatible 03 Dec 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211130154623-56c156489c7e 30 Nov 2021 M2 U3 AGPL-3.0 No Details →
v3.0.3+incompatible 30 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211130145410-0acb66aad7f9 30 Nov 2021 M2 U3 AGPL-3.0 No Details →
v3.0.3-0.20211130145410-0acb66aad7f9+incompatible 30 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211130142838-267c7f49a683 30 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211126093406-7f738340423c 26 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211126083139-c5c8fec343fa 26 Nov 2021 M2 U3 AGPL-3.0 No Details →
v3.0.2-0.20211126083139-c5c8fec343fa+incompatible 26 Nov 2021 M2 U3 AGPL-3.0 No Details →
v3.0.2+incompatible 25 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211124161749-ecec1e7b9dd5 24 Nov 2021 M2 U3 AGPL-3.0 No Details →
v3.0.2-0.20211124161749-ecec1e7b9dd5+incompatible 24 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211122140155-76c80a7ff310 22 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211118124914-66a1ebfc7f26 18 Nov 2021 M2 U3 AGPL-3.0 No Details →
v3.0.2-0.20211118124914-66a1ebfc7f26+incompatible 18 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211118122423-b32a296933dc 18 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211118112406-967fe96dc1a3 18 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211118092409-461fa2145ea5 18 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211109113147-c2dcb57c20b3 09 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211108144456-2f0dd53ffb48 08 Nov 2021 M2 U3 AGPL-3.0 No Details →
v3.0.1+incompatible 08 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211108141331-a1f6252255c9 08 Nov 2021 M2 U3 AGPL-3.0 No Details →
v3.0.1-0.20211108141331-a1f6252255c9+incompatible 08 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211105144458-b02d79f878cd 05 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211105142059-b2cb01a61c15 05 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211105133113-3bee12b25f89 05 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211104170308-3cbd134b4460 04 Nov 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211026102659-b2bd8ee967ee 26 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211026084004-06ff62992c05 26 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211026081841-e9c38bf9a90f 26 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211025125222-ffae9051cd57 25 Oct 2021 M2 U3 AGPL-3.0 No Details →
v3.0.0-rc4.0.20211025125222-ffae9051cd57+incompatible 25 Oct 2021 M2 U3 AGPL-3.0 No Details →
v3.0.0+incompatible 25 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211025082816-90fb4f730ebe 25 Oct 2021 M2 U3 AGPL-3.0 No Details →
v3.0.0-rc4.0.20211025082816-90fb4f730ebe+incompatible 25 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211024151529-9027b0b6d8fe 24 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211022135953-004f20579bb9 22 Oct 2021 M2 U3 AGPL-3.0 No Details →
v3.0.0-rc4.0.20211022135953-004f20579bb9+incompatible 22 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211022113729-515c0d62ac5c 22 Oct 2021 M2 U3 AGPL-3.0 No Details →
v3.0.0-rc4.0.20211022113729-515c0d62ac5c+incompatible 22 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211022084644-bc3a4468d284 22 Oct 2021 M2 U3 AGPL-3.0 No Details →
v3.0.0-rc4.0.20211022084644-bc3a4468d284+incompatible 22 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211021155308-1d6f410970f3 21 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211021150822-1570095661f2 21 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211021140654-66d7167ca0a8 21 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211021094155-862d0a03411d 21 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211020144735-9f6a6dfb499f 20 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211020141149-b46e6d282ca4 20 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211020105419-e49dcb69af38 20 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211020091128-b1cdf52be2b6 20 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211018162242-008fee3c7d3c 18 Oct 2021 M2 U3 AGPL-3.0 No Details →
v3.0.0-rc4+incompatible 18 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211018153838-ce338df90f03 18 Oct 2021 M2 U3 AGPL-3.0 No Details →
v3.0.0-rc3.0.20211018153838-ce338df90f03+incompatible 18 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211018153212-8c2ad183f0b9 18 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211018103002-5ab9db057366 18 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211015153448-1fba607c86ea 15 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211015090211-a868912174b4 15 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211014155837-ff5a547179be 14 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211014144614-a8a55d331867 14 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211014141853-59ebc715daf7 14 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211013174034-9398953e34ce 13 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211013152616-308698348abc 13 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211013131713-c100147f8e0c 13 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211013110102-1f285fe28ba3 13 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211013091423-cd4e471b6946 13 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211012203748-98bb7c92e76c 12 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211012110125-44e5531cfed0 12 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211012101153-3d7058362d8e 12 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211011173010-6c1008e089a3 11 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211011152847-4f7d0c7ff06d 11 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211011132048-12e781a64fc2 11 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211011093942-7d9cca0c24c6 11 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211008160722-4dd2a9d40466 08 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211008150458-ebedba3d8ff2 08 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211008143325-9039508e644e 08 Oct 2021 M2 U3 AGPL-3.0 No Details →
v1.6.2-0.20211008102028-748a6fcb9761 08 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211008082704-d17c180046e2 08 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211007104016-9b3e08169327 07 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211007092955-edb97aafcf07 07 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211006202341-63c185de376d 06 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211006104222-1156bd9a8e95 06 Oct 2021 M2 U3 — No Details →
v3.0.0-rc2.0.20211006104222-1156bd9a8e95+incompatible 06 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211006100055-dc7d50a0c0e1 06 Oct 2021 M2 U3 — No Details →
v3.0.0-rc3+incompatible 06 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211006082817-4db9a826ef4b 06 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211005144230-74590e3b2733 05 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211005134908-0f4850338e60 05 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211005131106-8e7aceeac2cf 05 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211005102254-ad1cb9352b31 05 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211004180759-5e2fd4d146ed 04 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211004161019-c0b43ad42175 04 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211004141737-fee6855f1d47 04 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211004105623-3d90a0ebf5c1 04 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211004103439-433e7be57289 04 Oct 2021 M2 U3 — No Details →
v1.6.2-0.20211001153709-4cf5cd164c38 01 Oct 2021 M2 U3 — No Details →

The newest 120 of 303 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2023 2
  • 2024 3

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 5 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/pydio/cells

The 5 most severe of 5 vulnerabilities recorded for this package

Search all 5 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2023-2981: Cross-Site Scripting Vulnerability in Abstrium Pydio Cells 5.4 medium 4.2.1 30 May 2023
CVE-2023-2978: Authorization Bypass in Pydio Cells 4.3 medium 4.2.1 30 May 2023
CVE-2023-2981: Cross-Site Scripting Vulnerability in github.com/pydio/cells N/A unrated No fix published 20 Aug 2024
CVE-2023-2978: Authorization Bypass in github.com/pydio/cells N/A unrated No fix published 20 Aug 2024
CVE-2023-2980: Abstrium Pydio Cells Resource Injection Vulnerability N/A unrated No fix published 21 Aug 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/pydio/cells

Is github.com/pydio/cells safe to use?

Vulert records 5 vulnerabilities for github.com/pydio/cells in Go: 0 critical, 0 high, 2 medium and 0 low, plus 3 not yet rated. 3 of them have no published fix yet, so those are the ones to avoid or mitigate.

What is github.com/pydio/cells's Vulert package health score?

Vulert scores github.com/pydio/cells 60/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15). The current release has a vulnerability with no published fix, which caps this score.

Is the latest version of github.com/pydio/cells affected?

Yes. v3.0.9+incompatible, the version you would install today, has 5 known vulnerabilities, and 3 has no published fix yet. Use an earlier unaffected release, or the workaround each vulnerability lists.

Which version of github.com/pydio/cells should I use?

v3.0.9+incompatible is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/pydio/cells have?

5 vulnerabilities are recorded for github.com/pydio/cells in the Go ecosystem: 0 critical, 0 high, 2 medium and 0 low, plus 3 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/pydio/cells vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/pydio/cells in the last 12 months, and the oldest entry in this database dates to 30 May 2023. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/pydio/cells are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/pydio/cells for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/pydio/cells version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.