VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/rudderlabs/rudder-server: vulnerability history, versions and safety

github.com/rudderlabs/rudder-server is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, first recorded in Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded C1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/rudderlabs/rudder-server vulnerabilities

Vulert verdict on github.com/rudderlabs/rudder-server v1.91.1 i

Updated on 23 Oct 2026

Action needed: v1.91.1 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 84/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.91.1 — affected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 20 Aug 2024 i
  • Highest CVSS 8.8 i
  • With no published fix 0 i
  • Stars 4,500 i
  • OpenSSF scorecard 6/10 i
  • Last release this month i
  • Licence non-standard i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/rudderlabs/rudder-server, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.91.1 21 Oct 2026 C1 U1 — Yes Details →
v1.91.1-0.20261021001828-0e15eb49dfea 21 Oct 2026 C1 U1 — Yes Details →
v1.91.1-0.20261020171401-742779d042bb 20 Oct 2026 C1 U1 — Yes Details →
v1.91.1-0.20261020121334-9baa89f67833 20 Oct 2026 C1 U1 — Yes Details →
v1.91.0 20 Oct 2026 C1 U1 — Yes Details →
v1.90.1-0.20261020105952-2ca7d0674de6 20 Oct 2026 C1 U1 — Yes Details →
v1.91.0-rc.2 20 Oct 2026 C1 U1 — Yes Details →
v1.91.0-rc.1 19 Oct 2026 C1 U1 — Yes Details →
v1.90.1-0.20261019071554-526602c874d1 19 Oct 2026 C1 U1 — Yes Details →
v1.90.1-0.20261015070552-814d149ff5e6 15 Oct 2026 C1 U1 — Yes Details →
v1.90.1 15 Oct 2026 C1 U1 — Yes Details →
v1.90.1-0.20261014142537-71e8cfaed951 14 Oct 2026 C1 U1 — Yes Details →
v1.90.1-0.20261014063930-5caff53e9923 14 Oct 2026 C1 U1 — Yes Details →
v1.90.1-0.20261013162742-fc539c46b69e 13 Oct 2026 C1 U1 — Yes Details →
v1.90.1-0.20261013075846-d05fcbb2a6df 13 Oct 2026 C1 U1 — Yes Details →
v1.90.0 13 Oct 2026 C1 U1 — Yes Details →
v1.90.0-rc.1 12 Oct 2026 C1 U1 — Yes Details →
v1.89.1-0.20261012063332-5fa5fe24f2e0 12 Oct 2026 C1 U1 — Yes Details →
v1.89.1-0.20261012042303-cd3dc3e74e8a 12 Oct 2026 C1 U1 — Yes Details →
v1.89.1-0.20261009054619-74940c24ae5e 09 Oct 2026 C1 U1 — Yes Details →
v1.89.2 07 Oct 2026 C1 U1 — Yes Details →
v1.89.1-0.20261007120200-f424257952fb 07 Oct 2026 C1 U1 — Yes Details →
v1.89.1-0.20261001145600-6e9f92093d5a 01 Oct 2026 C1 U1 — Yes Details →
v1.89.1-0.20260929112236-93cd81d96c89 29 Sep 2026 C1 U1 — Yes Details →
v1.89.1 29 Sep 2026 C1 U1 — Yes Details →
v1.89.0 29 Sep 2026 C1 U1 — Yes Details →
v1.88.1-0.20260929042328-52d2b551c062 29 Sep 2026 C1 U1 — Yes Details →
v1.89.0-rc.1 28 Sep 2026 C1 U1 — Yes Details →
v1.88.1-0.20260925072937-0806478532f0 25 Sep 2026 C1 U1 — Yes Details →
v1.88.1-0.20260924053154-ec0cf524060d 24 Sep 2026 C1 U1 — Yes Details →
v1.88.0 22 Sep 2026 C1 U1 — Yes Details →
v1.88.0-rc.1 21 Sep 2026 C1 U1 — Yes Details →
v1.87.1-0.20260921114340-d152ae5513b6 21 Sep 2026 C1 U1 — Yes Details →
v1.87.1-0.20260918112328-a17a78f8b046 18 Sep 2026 C1 U1 — Yes Details →
v1.87.1 18 Sep 2026 C1 U1 — Yes Details →
v1.87.1-0.20260917110413-db849871a57b 17 Sep 2026 C1 U1 — Yes Details →
v1.87.1-0.20260915091906-80353d18b25c 15 Sep 2026 C1 U1 — Yes Details →
v1.87.0 15 Sep 2026 C1 U1 — Yes Details →
v1.87.0-rc.4 15 Sep 2026 C1 U1 — Yes Details →
v1.86.1-0.20260915074031-f48c9979ff07 15 Sep 2026 C1 U1 — Yes Details →
v1.87.0-rc.3 14 Sep 2026 C1 U1 — Yes Details →
v1.86.1-0.20260914201610-2ff491fec4d4 14 Sep 2026 C1 U1 — Yes Details →
v1.87.0-rc.2 14 Sep 2026 C1 U1 — Yes Details →
v1.86.1-0.20260914144058-eaa9b6165551 14 Sep 2026 C1 U1 — Yes Details →
v1.87.0-rc.1 14 Sep 2026 C1 U1 — Yes Details →
v1.86.1-0.20260914103528-8d95c68dd367 14 Sep 2026 C1 U1 — Yes Details →
v1.86.1-0.20260911081209-14659bfe7449 11 Sep 2026 C1 U1 — Yes Details →
v1.86.1-0.20260909142642-4d743db0bdf4 09 Sep 2026 C1 U1 — Yes Details →
v1.86.1 09 Sep 2026 C1 U1 — Yes Details →
v1.86.1-0.20260909094824-4898165da311 09 Sep 2026 C1 U1 — Yes Details →
v1.86.1-0.20260908080753-6868c6c2c3a9 08 Sep 2026 C1 U1 — Yes Details →
v1.86.0 08 Sep 2026 C1 U1 — Yes Details →
v1.86.0-rc.1 07 Sep 2026 C1 U1 — Yes Details →
v1.85.1-0.20260907085450-f4dc4d91c102 07 Sep 2026 C1 U1 — Yes Details →
v1.85.1-0.20260904085921-d60b3c63e595 04 Sep 2026 C1 U1 — Yes Details →
v1.85.1-0.20260901165646-887f6d28d856 01 Sep 2026 C1 U1 — Yes Details →
v1.85.0 01 Sep 2026 C1 U1 — Yes Details →
v1.84.1-0.20260831112205-cd84aaa2926c 31 Aug 2026 C1 U1 — Yes Details →
v1.85.0-rc.1 31 Aug 2026 C1 U1 — Yes Details →
v1.84.1-0.20260825084837-2eb1fa69c644 25 Aug 2026 C1 U1 — Yes Details →
v1.84.1-0.20260825081614-3efa7182606b 25 Aug 2026 C1 U1 — Yes Details →
v1.84.0 25 Aug 2026 C1 U1 — Yes Details →
v1.84.0-rc.1 24 Aug 2026 C1 U1 — Yes Details →
v1.83.1-0.20260824112900-7a83281269e2 24 Aug 2026 C1 U1 — Yes Details →
v1.83.1-0.20260819121427-f2655fbbe226 19 Aug 2026 C1 U1 — Yes Details →
v1.83.1-0.20260818115638-2d28b3265c92 18 Aug 2026 C1 U1 — Yes Details →
v1.83.1-0.20260818072240-bfd8bc9d20c3 18 Aug 2026 C1 U1 — Yes Details →
v1.83.0 18 Aug 2026 C1 U1 — Yes Details →
v1.83.0-rc.1 17 Aug 2026 C1 U1 — Yes Details →
v1.82.1-0.20260817113130-9693b0d8e165 17 Aug 2026 C1 U1 — Yes Details →
v1.82.1-0.20260814094847-149e91aecaef 14 Aug 2026 C1 U1 — Yes Details →
v1.82.0 04 Aug 2026 C1 U1 — Yes Details →
v1.82.0-rc.1 03 Aug 2026 C1 U1 — Yes Details →
v1.81.1-0.20260731124629-ab86afdb1d2f 31 Jul 2026 C1 U1 — Yes Details →
v1.81.5 31 Jul 2026 C1 U1 — Yes Details →
v1.81.1-0.20260730194059-6eb91b47bfa7 30 Jul 2026 C1 U1 — Yes Details →
v1.81.1-0.20260728171815-3e126b202715 28 Jul 2026 C1 U1 — Yes Details →
v1.81.4 28 Jul 2026 C1 U1 — Yes Details →
v1.81.1-0.20260728120947-1d772a1823ed 28 Jul 2026 C1 U1 — Yes Details →
v1.81.3 27 Jul 2026 C1 U1 — Yes Details →
v1.81.1-0.20260727090254-5279b6473d1a 27 Jul 2026 C1 U1 — Yes Details →
v1.81.2 27 Jul 2026 C1 U1 — Yes Details →
v1.81.1-0.20260727064651-a684641a6705 27 Jul 2026 C1 U1 — Yes Details →
v1.81.1-0.20260722152951-50df0f7a08c4 22 Jul 2026 C1 U1 — Yes Details →
v1.81.1 22 Jul 2026 C1 U1 — Yes Details →
v1.81.1-0.20260722053946-0eaa8337a3b2 22 Jul 2026 C1 U1 — Yes Details →
v1.81.0 21 Jul 2026 C1 U1 — Yes Details →
v1.80.1-0.20260720145725-2882af4bcbce 20 Jul 2026 C1 U1 — Yes Details →
v1.81.0-rc.1 20 Jul 2026 C1 U1 — Yes Details →
v1.80.1-0.20260720093010-88a0ddf40fcf 20 Jul 2026 C1 U1 — Yes Details →
v1.80.2 15 Jul 2026 C1 U1 — Yes Details →
v1.80.1-0.20260714091453-5aeb4818bfbb 14 Jul 2026 C1 U1 — Yes Details →
v1.80.1 09 Jul 2026 C1 U1 — Yes Details →
v1.80.1-0.20260709072332-581410cb5c5e 09 Jul 2026 C1 U1 — Yes Details →
v1.80.0 07 Jul 2026 C1 U1 — Yes Details →
v1.79.1-0.20260707061133-6027e85742fb 07 Jul 2026 C1 U1 — Yes Details →
v1.80.0-rc.1 06 Jul 2026 C1 U1 — Yes Details →
v1.79.1-0.20260706081627-8a704cf6c5e0 06 Jul 2026 C1 U1 — Yes Details →
v1.79.1-0.20260703083736-d1df48640581 03 Jul 2026 C1 U1 — Yes Details →
v1.79.1-0.20260703075842-ea6ca006ddc9 03 Jul 2026 C1 U1 — Yes Details →
v1.79.1-0.20260703070348-84fc747b56f8 03 Jul 2026 C1 U1 — Yes Details →
v1.79.1-0.20260701215930-d6a4dbc7b24b 01 Jul 2026 C1 U1 — Yes Details →
v1.79.2 01 Jul 2026 C1 U1 — Yes Details →
v1.79.1-0.20260630150934-11c9ab8b50de 30 Jun 2026 C1 U1 — Yes Details →
v1.79.1 30 Jun 2026 C1 U1 — Yes Details →
v1.79.1-0.20260630054228-421c6132f2c6 30 Jun 2026 C1 U1 — Yes Details →
v1.79.0 30 Jun 2026 C1 U1 — Yes Details →
v1.78.1-0.20260629110057-9e6ee1c9476b 29 Jun 2026 C1 U1 — Yes Details →
v1.79.0-rc.2 29 Jun 2026 C1 U1 — Yes Details →
v1.79.0-rc.1 29 Jun 2026 C1 U1 — Yes Details →
v1.78.1-0.20260626060953-f68a56d77c3a 26 Jun 2026 C1 U1 — Yes Details →
v1.78.1-0.20260623162658-61b41e42438a 23 Jun 2026 C1 U1 — Yes Details →
v1.78.0 23 Jun 2026 C1 U1 — Yes Details →
v1.78.0-rc.1 23 Jun 2026 C1 U1 — Yes Details →
v1.77.1-0.20260622145226-e0a2e42d7fcc 22 Jun 2026 C1 U1 — Yes Details →
v1.77.4 22 Jun 2026 C1 U1 — Yes Details →
v1.77.1-0.20260622085848-d3fab820afab 22 Jun 2026 C1 U1 — Yes Details →
v1.77.3 17 Jun 2026 C1 U1 — Yes Details →
v1.77.1-0.20260617063952-6f85153f2b41 17 Jun 2026 C1 U1 — Yes Details →
v1.77.2 16 Jun 2026 C1 U1 — Yes Details →

The newest 120 of 1,428 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/rudderlabs/rudder-server

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
SQL Injection Vulnerability in rudder-server 8.8 critical 1.3.0-rc.1 05 Aug 2024
CVE-2023-30625: SQL Injection Vulnerability in rudder-server N/A unrated 1.3.0-rc.1 20 Aug 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/rudderlabs/rudder-server

Is github.com/rudderlabs/rudder-server safe to use?

Vulert records 2 vulnerabilities for github.com/rudderlabs/rudder-server in Go: 1 critical, 0 high, 0 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/rudderlabs/rudder-server's Vulert package health score?

Vulert scores github.com/rudderlabs/rudder-server 84/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/rudderlabs/rudder-server affected?

Yes. v1.91.1, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does github.com/rudderlabs/rudder-server have?

2 vulnerabilities are recorded for github.com/rudderlabs/rudder-server in the Go ecosystem: 1 critical, 0 high, 0 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/rudderlabs/rudder-server vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/rudderlabs/rudder-server in the last 12 months, and the oldest entry in this database dates to 05 Aug 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/rudderlabs/rudder-server are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/rudderlabs/rudder-server for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/rudderlabs/rudder-server version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.