VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/russross/blackfriday: vulnerability history, versions and safety

github.com/russross/blackfriday is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/russross/blackfriday vulnerabilities

Vulert verdict on github.com/russross/blackfriday v1.6.0 i

Updated on 23 Oct 2026

Good news: v1.6.0, the version you would install today, has no known vulnerabilities.

Package health score 61/100
  • Security Minor issues
  • Maintenance Unmaintained
  • Popularity Key ecosystem project
  • Community Quiet

What to do: Stay on v1.6.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.6.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v1.6.0 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 5,593 i
  • OpenSSF scorecard 2/10 i
  • Last release 71 months ago i
  • Licence BSD-2-Clause i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/russross/blackfriday, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20201027034640-e96880f42b93 27 Oct 2020 none BSD-2-Clause — Details →
v1.5.2-0.20201027034640-e96880f42b93 27 Oct 2020 none BSD-2-Clause — Details →
v1.5.3-0.20201027034640-e96880f42b93 27 Oct 2020 none BSD-2-Clause — Details →
v1.6.0 27 Oct 2020 none BSD-2-Clause — Details →
v1.6.0-pre.1 27 Oct 2020 none BSD-2-Clause — Details →
v0.0.0-20200325151822-abb995c46634 25 Mar 2020 none BSD-2-Clause — Details →
v1.5.3-0.20200325151822-abb995c46634 25 Mar 2020 none BSD-2-Clause — Details →
v1.5.3-0.20200324021151-665c4def6516 24 Mar 2020 none BSD-2-Clause — Details →
v0.0.0-20200218234912-41c5fccfd6f6 18 Feb 2020 none BSD-2-Clause — Details →
v1.5.3-0.20200218234912-41c5fccfd6f6 18 Feb 2020 none BSD-2-Clause — Details →
v1.5.3-0.20200203214132-c04ab11830c7 03 Feb 2020 none BSD-2-Clause — Details →
v1.5.3-0.20190922142707-41eb1fe8a788 22 Sep 2019 none BSD-2-Clause — Details →
v1.5.3-0.20190820215439-e2f6cd9f545d 20 Aug 2019 none BSD-2-Clause — Details →
v1.5.3-0.20190820214027-5c6bc5df8a24 20 Aug 2019 none BSD-2-Clause — Details →
v0.0.0-20190616195246-a925a152c144 16 Jun 2019 none BSD-2-Clause — Details →
v1.5.3-0.20190616195246-a925a152c144 16 Jun 2019 none BSD-2-Clause — Details →
v0.0.0-20190417191706-f3ccc8fc06d5 17 Apr 2019 none BSD-2-Clause — Details →
v1.5.3-0.20190417191706-f3ccc8fc06d5 17 Apr 2019 none BSD-2-Clause — Details →
v0.0.0-20190124082335-a477dd164691 24 Jan 2019 none BSD-2-Clause — Details →
v1.5.3-0.20190124082335-a477dd164691 24 Jan 2019 none BSD-2-Clause — Details →
v1.5.3-0.20190120184203-13768b07fa38 20 Jan 2019 none BSD-2-Clause — Details →
v1.5.3-0.20190120183836-8c3eacd7a583 20 Jan 2019 none BSD-2-Clause — Details →
v0.0.0-20181115203843-abafa45cd843 15 Nov 2018 none BSD-2-Clause — Details →
v1.5.3-0.20181115203843-abafa45cd843 15 Nov 2018 none BSD-2-Clause — Details →
v0.0.0-20180917185906-05f3235734ad 17 Sep 2018 none BSD-2-Clause — Details →
v1.5.2 17 Sep 2018 none BSD-2-Clause — Details →
v1.5.2-0.20180917185906-05f3235734ad 17 Sep 2018 none BSD-2-Clause — Details →
v2.0.1-0.20180907214714-646308596abc+incompatible 07 Sep 2018 none BSD-2-Clause — Details →
v0.0.0-20180829180558-eebcfd6bbfd3 29 Aug 2018 none BSD-2-Clause — Details →
v0.0.0-20180829180401-f1f45ab762c2 29 Aug 2018 none BSD-2-Clause — Details →
v1.5.2-0.20180829180401-f1f45ab762c2 29 Aug 2018 none BSD-2-Clause — Details →
v0.0.0-20180824211341-d85484cdc4a5 24 Aug 2018 none BSD-2-Clause — Details →
v0.0.0-20180804101149-46c73eb196ba 04 Aug 2018 none BSD-2-Clause — Details →
v1.5.2-0.20180804101149-46c73eb196ba 04 Aug 2018 none BSD-2-Clause — Details →
v1.5.2-0.20180804100849-34d6fae9611c 04 Aug 2018 none BSD-2-Clause — Details →
v0.0.0-20180526075726-670777b536d3 26 May 2018 none BSD-2-Clause — Details →
v2.0.1-0.20180526075726-670777b536d3+incompatible 26 May 2018 none BSD-2-Clause — Details →
v0.0.0-20180428102538-3420fef03359 28 Apr 2018 none BSD-2-Clause — Details →
v2.0.1-0.20180428102538-3420fef03359+incompatible 28 Apr 2018 none BSD-2-Clause — Details →
v0.0.0-20180428102519-11635eb403ff 28 Apr 2018 none BSD-2-Clause — Details →
v1.5.2-0.20180428102519-11635eb403ff 28 Apr 2018 none BSD-2-Clause — Details →
v2.0.1-0.20180426185123-6aeb241ce2c0+incompatible 26 Apr 2018 none BSD-2-Clause — Details →
v0.0.0-20180426185003-16ac584625fa 26 Apr 2018 none BSD-2-Clause — Details →
v1.5.2-0.20180426185003-16ac584625fa 26 Apr 2018 none BSD-2-Clause — Details →
v2.0.1-0.20180320195035-c455fd41c6ba+incompatible 20 Mar 2018 none BSD-2-Clause — Details →
v1.5.2-0.20180225135005-e8ced3fa10b8 25 Feb 2018 none BSD-2-Clause — Details →
v0.0.0-20180218093601-55d61fa8aa70 18 Feb 2018 none BSD-2-Clause — Details →
v1.5.1 18 Feb 2018 none BSD-2-Clause — Details →
v0.0.0-20180212082820-8db9055e38f0 12 Feb 2018 none BSD-2-Clause — Details →
v0.0.0-20171015183000-2a3e10a69d55 15 Oct 2017 none BSD-2-Clause — Details →
v0.0.0-20171011182219-6d1ef893fcb0 11 Oct 2017 none BSD-2-Clause — Details →
v0.0.0-20171007094158-8249792ba80f 07 Oct 2017 none BSD-2-Clause — Details →
v0.0.0-20171007081428-52dd06192f86 07 Oct 2017 none BSD-2-Clause — Details →
v0.0.0-20171007081428-8ad7e40db09b 07 Oct 2017 none BSD-2-Clause — Details →
v0.0.0-20170905170819-187c33ff049b 05 Sep 2017 none BSD-2-Clause — Details →
v2.0.1-0.20170905170819-187c33ff049b+incompatible 05 Sep 2017 none BSD-2-Clause — Details →
v0.0.0-20170806171014-cadec560ec52 06 Aug 2017 none BSD-2-Clause — Details →
v2.0.0+incompatible 06 Aug 2017 none BSD-2-Clause — Details →
v0.0.0-20170728175326-4048872b16cc 28 Jul 2017 none BSD-2-Clause — Details →
v0.0.0-20170727200820-4ca8c28b21a8 27 Jul 2017 none BSD-2-Clause — Details →
v0.0.0-20170610170232-067529f716f4 10 Jun 2017 none BSD-2-Clause — Details →
v0.0.0-20170609161805-70c446a327c4 09 Jun 2017 none BSD-2-Clause — Details →
v0.0.0-20170608064356-a20399916c11 08 Jun 2017 none BSD-2-Clause — Details →
v0.0.0-20170605204205-2501229ba6f7 05 Jun 2017 none BSD-2-Clause — Details →
v0.0.0-20170509060714-0ba0f2b6ed7c 09 May 2017 none BSD-2-Clause — Details →
v0.0.0-20170413173632-b253417e1cb6 13 Apr 2017 none BSD-2-Clause — Details →
v0.0.0-20170317092130-f0bb45f44c54 17 Mar 2017 none BSD-2-Clause — Details →
v0.0.0-20170222011821-8098dab4eb9c 22 Feb 2017 none BSD-2-Clause — Details →
v0.0.0-20170222011546-3ffe8c7f6b8f 22 Feb 2017 none BSD-2-Clause — Details →
v0.0.0-20170214194027-5ebfae50aacd 14 Feb 2017 none BSD-2-Clause — Details →
v0.0.0-20170214191732-b98e30685370 14 Feb 2017 none BSD-2-Clause — Details →
v0.0.0-20170202150819-ad7f7c56d58a 02 Feb 2017 none BSD-2-Clause — Details →
v0.0.0-20161207190704-a4dd8ad4a6fd 07 Dec 2016 none BSD-2-Clause — Details →
v0.0.0-20161009072609-52676fb0053f 09 Oct 2016 none BSD-2-Clause — Details →
v0.0.0-20161003162722-5f33e7b78783 03 Oct 2016 none BSD-2-Clause — Details →
v0.0.0-20160909062854-35eb537633d9 09 Sep 2016 none BSD-2-Clause — Details →
v0.0.0-20160716153403-93622da34e54 16 Jul 2016 none BSD-2-Clause — Details →
v0.0.0-20160715193758-4e6f303e8d93 15 Jul 2016 none BSD-2-Clause — Details →
v0.0.0-20160715185957-00496765999e 15 Jul 2016 none BSD-2-Clause — Details →
v0.0.0-20160531111224-1d6b8e9301e7 31 May 2016 none BSD-2-Clause — Details →
v0.0.0-20160525050436-b88a9bd45815 25 May 2016 none BSD-2-Clause — Details →
v0.0.0-20160510190922-2004188462c3 10 May 2016 none BSD-2-Clause — Details →
v0.0.0-20160506182755-acc07e614468 06 May 2016 none BSD-2-Clause — Details →
v0.0.0-20160502172848-43529be3978d 02 May 2016 none BSD-2-Clause — Details →
v0.0.0-20160429054704-fc997ac2ba58 29 Apr 2016 none BSD-2-Clause — Details →
v0.0.0-20160421080930-151efb040f18 21 Apr 2016 none BSD-2-Clause — Details →
v0.0.0-20160403130832-69f51afe4297 03 Apr 2016 none BSD-2-Clause — Details →
v0.0.0-20160402141343-232d06cf99dd 02 Apr 2016 none BSD-2-Clause — Details →
v0.0.0-20160330114730-70124f1ea319 30 Mar 2016 none BSD-2-Clause — Details →
v0.0.0-20160330113819-eb70b232210b 30 Mar 2016 none BSD-2-Clause — Details →
v0.0.0-20160330095712-7c95b7a1891c 30 Mar 2016 none BSD-2-Clause — Details →
v0.0.0-20160330095412-94893247d10d 30 Mar 2016 none BSD-2-Clause — Details →
v0.0.0-20160316072903-b43df972fb5f 16 Mar 2016 none BSD-2-Clause — Details →
v0.0.0-20160316062150-1d94959fea02 16 Mar 2016 none BSD-2-Clause — Details →
v0.0.0-20160124111256-006144af03ee 24 Jan 2016 none BSD-2-Clause — Details →
v0.0.0-20160123000449-2ee51ae2a081 23 Jan 2016 none BSD-2-Clause — Details →
v0.0.0-20151230154228-c8875c0ed47e 30 Dec 2015 none BSD-2-Clause — Details →
v0.0.0-20151225111444-b8031576aa45 25 Dec 2015 none BSD-2-Clause — Details →
v0.0.0-20151214185740-05a79218edc4 14 Dec 2015 none BSD-2-Clause — Details →
v0.0.0-20151212171859-d18b67ae0afd 12 Dec 2015 none BSD-2-Clause — Details →
v0.0.0-20151211182512-3c4a488adacb 11 Dec 2015 none — — Details →
v0.0.0-20151210185247-bcd6dd8711ba 10 Dec 2015 none — — Details →
v0.0.0-20151206172614-e3cbadc5c960 06 Dec 2015 none — — Details →
v0.0.0-20151205020036-1bb1fa9e9579 05 Dec 2015 none — — Details →
v0.0.0-20151117072312-300106c228d5 17 Nov 2015 none — — Details →
v0.0.0-20151110051855-0b647d0506a6 10 Nov 2015 none — — Details →
v0.0.0-20151108193444-18432fc942c4 08 Nov 2015 none — — Details →
v0.0.0-20151104194057-510be64de022 04 Nov 2015 none — — Details →
v0.0.0-20151102181746-9e68ff937bf9 02 Nov 2015 none — — Details →
v0.0.0-20151101103602-660c9fd28395 01 Nov 2015 none — — Details →
v0.0.0-20151101073230-4193e8665ac7 01 Nov 2015 none — — Details →
v0.0.0-20151031213521-e93d8f1624b4 31 Oct 2015 none — — Details →
v0.0.0-20151030155010-6a7bd0d6e947 30 Oct 2015 none — — Details →
v0.0.0-20151029182829-15eb452ae4d5 29 Oct 2015 none — — Details →
v0.0.0-20151028192151-d4ee3ea08bf2 28 Oct 2015 none — — Details →
v0.0.0-20151027182108-4b26653fe000 27 Oct 2015 none — — Details →
v0.0.0-20151020174500-a18a46c9b943 20 Oct 2015 none — — Details →
v0.0.0-20151018175129-1d673b3cd9cc 18 Oct 2015 none — — Details →
v0.0.0-20151013165715-f7510976a3f3 13 Oct 2015 none — — Details →
v0.0.0-20151012181833-08eac30cb987 12 Oct 2015 none — — Details →

The newest 120 of 211 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/russross/blackfriday

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/russross/blackfriday

Is github.com/russross/blackfriday safe to use?

Vulert has no vulnerabilities on record for github.com/russross/blackfriday in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/russross/blackfriday's Vulert package health score?

Vulert scores github.com/russross/blackfriday 61/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/russross/blackfriday affected?

No. v1.6.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of github.com/russross/blackfriday should I use?

v1.6.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/russross/blackfriday have?

0 vulnerabilities are recorded for github.com/russross/blackfriday in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/russross/blackfriday vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/russross/blackfriday in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/russross/blackfriday are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/russross/blackfriday for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/russross/blackfriday version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.