Vulnerability Database · Go · Package report

github.com/rcrowley/go-metrics: vulnerability history, versions and safety

github.com/rcrowley/go-metrics is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

Vulert verdict on github.com/rcrowley/go-metrics v0.0.0-20250401214520-65e299d6c5c9 i

Updated on 23 Oct 2026

Good news: v0.0.0-20250401214520-65e299d6c5c9, the version you would install today, has no known vulnerabilities.

Package health score 71/100
  • Security Minor issues
  • Maintenance Maintaining
  • Popularity Key ecosystem project
  • Community Quiet

What to do: Stay on v0.0.0-20250401214520-65e299d6c5c9 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.0.0-20250401214520-65e299d6c5c9 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v0.0.0-20250401214520-65e299d6c5c9 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 3,460 i
  • OpenSSF scorecard 1/10 i
  • Last release 18 months ago i
  • Licence BSD-2-Clause-Views i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/rcrowley/go-metrics, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20250401214520-65e299d6c5c9 01 Apr 2025 none BSD-2-Clause-Views — Details →
v0.0.0-20250401214213-3f421507abc6 01 Apr 2025 none BSD-2-Clause-Views — Details →
v0.0.0-20201227073835-cf1acfcdf475 27 Dec 2020 none BSD-2-Clause-Views — Details →
v0.0.0-20200313005456-10cdbea86bc0 13 Mar 2020 none BSD-2-Clause-Views — Details →
v0.0.0-20200313004838-5f429cefaaf8 13 Mar 2020 none BSD-2-Clause-Views — Details →
v0.0.0-20190826022208-cac0b30c2563 26 Aug 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190825190146-3c7535cba3ec 25 Aug 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190825055315-02d3148a7d5d 25 Aug 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190824153315-d5a5a65eb11a 24 Aug 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190823104358-67d5330f40b8 23 Aug 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190720235953-e15696f2bb9e 20 Jul 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190706150252-9beb055b7962 06 Jul 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190706150239-78f19ec5cea3 06 Jul 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190706145657-e03e791fe3a1 06 Jul 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190704165056-9c2d0518ed81 04 Jul 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190704164741-00fd285342c4 04 Jul 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190704162354-f882a99d548e 04 Jul 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190704162010-01d2035bde73 04 Jul 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190704161918-e854fef96b9f 04 Jul 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190704161848-5712120c7565 04 Jul 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190704161010-a667ec24892f 04 Jul 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20190408132848-b19624bee4f4 08 Apr 2019 none BSD-2-Clause-Views — Details →
v0.0.0-20181212133258-2d03e0c978dd 12 Dec 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20181211161219-80818d207afd 11 Dec 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20181211155716-615496d9b727 11 Dec 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20181018113308-6c9dcebed9b9 18 Oct 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20181016184325-3113b8401b8a 16 Oct 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20181015211442-4123bd99cbd8 15 Oct 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20181001210534-5195ae75a0c5 01 Oct 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180618042947-bba21bec5e0f 18 Jun 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180503174638-e2704e165165 03 May 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180503174034-16ed6e29f929 03 May 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180406234716-d932a24a8ccb 06 Apr 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180406232432-cf894ca225d7 06 Apr 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180406191323-f1af7f7bf233 06 Apr 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180406190402-3a868c8f60f6 06 Apr 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180406182835-8263d3d9f5e0 06 Apr 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180406182445-0d6b05084501 06 Apr 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180406181632-92920137f509 06 Apr 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180406181250-4cdad2ce7c6c 06 Apr 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180405181515-90735333ef07 05 Apr 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180405175849-b08b7421c5a1 05 Apr 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180405174230-0201454ee51a 05 Apr 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180405172722-c8b5fd4aa5e5 05 Apr 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180125231941-8732c616f529 25 Jan 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20180125231126-7848d2161518 25 Jan 2018 none BSD-2-Clause-Views — Details →
v0.0.0-20171129023000-bcdb5e0c4ab4 29 Nov 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20171128170426-e181e095bae9 28 Nov 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20171128170114-b6862afa601d 28 Nov 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20171128161531-bdaddfcaf8ed 28 Nov 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20171128081952-6eef1fc14e6f 28 Nov 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20171128035205-52e601935752 28 Nov 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20171128033408-39aa48294934 28 Nov 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20171128033044-362f9b590cae 28 Nov 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20171128032813-af27be0e097f 28 Nov 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20170917153833-e2a30da93bd8 17 Sep 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20170917151837-972ba8f8e0ce 17 Sep 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20170912044349-03adafa7da87 12 Sep 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20170902223635-9180854cf5a0 02 Sep 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20170718222936-4c464678e8ad 18 Jul 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20170718002115-071cb08f1645 18 Jul 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20170707234112-63f9066b204f 07 Jul 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20170707211254-969e02d7b5fa 07 Jul 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20170512050240-ff4b9a81db61 12 May 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20170417060359-4b2ddcb0bf13 17 Apr 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20170208162525-c83b0eae9e58 08 Feb 2017 none BSD-2-Clause-Views — Details →
v0.0.0-20161128210544-1f30fe9094a5 28 Nov 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20161128205440-550432d8a73a 28 Nov 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20161128205407-51b876f1d392 28 Nov 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20161126154246-599ea08d1ce7 26 Nov 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20161119220025-1df74d5c3489 19 Nov 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20161119215937-22d219e7f208 19 Nov 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160921195207-ab2277b1c5d1 21 Sep 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160921184426-800344da390a 21 Sep 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160914131333-b71dba47c7bf 14 Sep 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160914063909-7282ad645347 14 Sep 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160914032448-6ee5318c7794 14 Sep 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160914032022-27c397ff1f27 14 Sep 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160912225620-7f88065b356e 12 Sep 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160912200159-6c7d680e7d0a 12 Sep 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160912195607-08f4e81b48dc 12 Sep 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160906164844-4fb3d81c1842 06 Sep 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160905024140-78329dab4907 05 Sep 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160901234026-658a96a3039a 01 Sep 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160718165337-bdb33529eca3 18 Jul 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160718165311-85efcd67fdfb 18 Jul 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160711041232-117967cbc750 11 Jul 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160613195838-15904c08a49a 13 Jun 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160613154715-cfa5a85e9f0a 13 Jun 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160611181055-5b279ff72e75 11 Jun 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160504204359-88a7eacb8ad9 04 May 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160312044127-a10bcea9f2d2 12 Mar 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160226052904-eeba7bd0dd01 26 Feb 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160224183933-e19570827a90 24 Feb 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160223165707-ed93375e3a61 23 Feb 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160113235030-51425a2415d2 13 Jan 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20160107054850-8ffdf559a171 07 Jan 2016 none BSD-2-Clause-Views — Details →
v0.0.0-20151201173431-d180546866d5 01 Dec 2015 none BSD-2-Clause-Views — Details →
v0.0.0-20151130033752-7da7ed577850 30 Nov 2015 none BSD-2-Clause-Views — Details →
v0.0.0-20151130001340-7839c01b09d2 30 Nov 2015 none BSD-2-Clause-Views — Details →
v0.0.0-20151130001241-9655675d79c6 30 Nov 2015 none — — Details →
v0.0.0-20151129233219-680c681b56b0 29 Nov 2015 none — — Details →
v0.0.0-20151129223516-7902517cc75c 29 Nov 2015 none — — Details →
v0.0.0-20150926004624-33c33c55a284 26 Sep 2015 none — — Details →
v0.0.0-20150912230648-304718cefc1a 12 Sep 2015 none — — Details →
v0.0.0-20150825212502-bde2592dd106 25 Aug 2015 none — — Details →
v0.0.0-20150822184925-1ce93efbc8f9 22 Aug 2015 none — — Details →
v0.0.0-20150822105749-2accf5d4f916 22 Aug 2015 none — — Details →
v0.0.0-20150719165614-3e5e59331110 19 Jul 2015 none — — Details →
v0.0.0-20150719081032-2ace5d04c3f7 19 Jul 2015 none — — Details →
v0.0.0-20150719003241-a248d281279e 19 Jul 2015 none — — Details →
v0.0.0-20150719002906-a8efa8de4242 19 Jul 2015 none — — Details →
v0.0.0-20150719001555-67be7604fa82 19 Jul 2015 none — — Details →
v0.0.0-20150719000033-ea346410a07b 19 Jul 2015 none — — Details →
v0.0.0-20150718171919-c76eeb4d8472 18 Jul 2015 none — — Details →
v0.0.0-20150713193607-7aeccdae5c4e 13 Jul 2015 none — — Details →
v0.0.0-20150713191936-264f2cd475d0 13 Jul 2015 none — — Details →
v0.0.0-20150712220350-1e6be82bd1e8 12 Jul 2015 none — — Details →
v0.0.0-20150705181936-15886a6fcaf3 05 Jul 2015 none — — Details →
v0.0.0-20150704192326-7a116865782a 04 Jul 2015 none — — Details →

The newest 120 of 219 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/rcrowley/go-metrics

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/rcrowley/go-metrics

Is github.com/rcrowley/go-metrics safe to use?

Vulert has no vulnerabilities on record for github.com/rcrowley/go-metrics in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/rcrowley/go-metrics's Vulert package health score?

Vulert scores github.com/rcrowley/go-metrics 71/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/rcrowley/go-metrics affected?

No. v0.0.0-20250401214520-65e299d6c5c9, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of github.com/rcrowley/go-metrics should I use?

v0.0.0-20250401214520-65e299d6c5c9 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/rcrowley/go-metrics have?

0 vulnerabilities are recorded for github.com/rcrowley/go-metrics in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/rcrowley/go-metrics vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/rcrowley/go-metrics in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/rcrowley/go-metrics are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/rcrowley/go-metrics for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/rcrowley/go-metrics version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.