Vulnerability Database · Go · Package report
github.com/Shopify/sarama: vulnerability history, versions and safety
github.com/Shopify/sarama is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/Shopify/sarama v1.38.1 i
Updated on 23 Oct 2026
Good news: v1.38.1, the version you would install today, has no known vulnerabilities.
- Security No known security issues
- Maintenance Slowing
- Popularity Key ecosystem project
- Community Active
What to do: Stay on v1.38.1 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.38.1 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v1.38.1 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 12,524 i
- OpenSSF scorecard 7/10 i
- Last release 45 months ago i
- Licence MIT i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/Shopify/sarama, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v1.38.2-0.20230713162648-fd35e170bea0 13 Jul 2023
- v1.38.2-0.20230712100911-fd21bd2ad901 12 Jul 2023
- v0.0.0-20230327141928-9127f1c432c0 27 Mar 2023
- v1.38.2-0.20230327141928-9127f1c432c0 27 Mar 2023
- v1.38.2-0.20230323224058-2f8dcd0731e5 23 Mar 2023
- v1.38.2-0.20230307214917-7dbf0b5d8553 07 Mar 2023
- v1.38.2-0.20230307095128-1015b4f7fe96 07 Mar 2023
- v1.38.2-0.20230208230852-397cee4974f6 08 Feb 2023
- v0.0.0-20230126230346-0b1569510cac 26 Jan 2023
- v1.38.2-0.20230126230346-0b1569510cac 26 Jan 2023
- v1.37.2-0.20230125220722-66e60c7ec601 25 Jan 2023
- v1.38.2-0.20230125220722-66e60c7ec601 25 Jan 2023
- v0.0.0-20230120203252-6acb2767144a 20 Jan 2023
- v1.38.1 20 Jan 2023
- v1.38.1-0.20230120203252-6acb2767144a 20 Jan 2023
- v1.38.1-0.20230117095347-871b1b1b15c2 17 Jan 2023
- v1.38.1-0.20230115132040-a3fb3f9b0a1f 15 Jan 2023
- v1.38.1-0.20230110135526-1b5bb4851e9e 10 Jan 2023
- v1.38.1-0.20230110115105-7db2a735325e 10 Jan 2023
- v0.0.0-20230110095707-b0eda59d1827 10 Jan 2023
- v1.38.0 10 Jan 2023
- v1.37.3-0.20221222113154-67d977b9197b 22 Dec 2022
- v1.37.3-0.20221221150252-237925756e46 21 Dec 2022
- v1.37.3-0.20221215130654-4392bc9536b5 15 Dec 2022
- v1.37.3-0.20221213124907-8828f057cded 13 Dec 2022
- v1.37.3-0.20221115112407-978aadd67322 15 Nov 2022
- v1.37.3-0.20221114233025-b4364243d3a4 14 Nov 2022
- v1.37.3-0.20221114145151-38204cbe4071 14 Nov 2022
- v1.37.2 04 Oct 2022
- v1.37.1 04 Oct 2022
- v1.37.1-0.20221003210252-50ceb9316869 03 Oct 2022
- v1.37.0 27 Sep 2022
- v1.36.1-0.20220927204728-f16c9d8fbe48 27 Sep 2022
- v1.36.1-0.20220920080037-d0a00ae55079 20 Sep 2022
- v1.36.1-0.20220915221713-eb5895f86dbe 15 Sep 2022
- v0.0.0-20220915180644-73de8dd773ce 15 Sep 2022
- v1.36.1-0.20220915154330-d66826a07ad0 15 Sep 2022
- v1.36.1-0.20220915133537-07f9abfb9c86 15 Sep 2022
- v1.36.0 11 Aug 2022
- v0.0.0-20220810133354-610b3aca8413 10 Aug 2022
- v1.35.1-0.20220810133354-610b3aca8413 10 Aug 2022
- v0.0.0-20220810130101-8293d3d5d38d 10 Aug 2022
- v0.0.0-20220810122054-5f249c8c5321 10 Aug 2022
- v0.0.0-20220810103600-a257e13230ea 10 Aug 2022
- v0.0.0-20220809145903-a4e96137d536 09 Aug 2022
- v1.35.1-0.20220809145903-a4e96137d536 09 Aug 2022
- v1.35.1-0.20220802223407-a0635a2abf6f 02 Aug 2022
- v1.35.1-0.20220728220100-9a769257dca7 28 Jul 2022
- v1.35.1-0.20220726132847-63ed4e14faa2 26 Jul 2022
- v1.35.0 22 Jul 2022
- v1.34.2-0.20220722154155-034046e83903 22 Jul 2022
- v0.0.0-20220722154029-8a001b4551d6 22 Jul 2022
- v0.0.0-20220722112104-845935fe3794 22 Jul 2022
- v0.0.0-20220722110243-739ace789346 22 Jul 2022
- v0.0.0-20220722103447-e1fbb94d509d 22 Jul 2022
- v0.0.0-20220720232559-1dd58a4cf391 20 Jul 2022
- v1.34.2-0.20220720232559-1dd58a4cf391 20 Jul 2022
- v0.0.0-20220720215425-bd9d8f1e5ca3 20 Jul 2022
- v0.0.0-20220720213746-c46db55dd0ba 20 Jul 2022
- v0.0.0-20220720211607-9d48baec8bea 20 Jul 2022
- v0.0.0-20220720161700-d96db86329ea 20 Jul 2022
- v1.34.2-0.20220719145101-6228349b4f92 19 Jul 2022
- v0.0.0-20220620092811-7a92423e79f7 20 Jun 2022
- v1.34.2-0.20220620092811-7a92423e79f7 20 Jun 2022
- v1.34.1 07 Jun 2022
- v0.0.0-20220607101826-9bf344fc6f90 07 Jun 2022
- v1.34.1-0.20220607101826-9bf344fc6f90 07 Jun 2022
- v1.34.1-0.20220607084643-39cc66a4594c 07 Jun 2022
- v0.0.0-20220606092704-0c4ba61b272c 06 Jun 2022
- v1.34.1-0.20220606092704-0c4ba61b272c 06 Jun 2022
- v1.34.1-0.20220601174615-4c0bbf8d8ee3 01 Jun 2022
- v1.34.0 30 May 2022
- v1.33.1-0.20220523151955-59a3d390ffc7 23 May 2022
- v0.0.0-20220520191711-1cbdb49dd3be 20 May 2022
- v1.33.1-0.20220520191711-1cbdb49dd3be 20 May 2022
- v1.33.1-0.20220520142420-5ee341cab43d 20 May 2022
- v1.33.1-0.20220520142205-f79a3889f899 20 May 2022
- v1.33.1-0.20220519115707-f5c37cfabafd 19 May 2022
- v0.0.0-20220511204507-54a84a712aa0 11 May 2022
- v1.33.0 11 May 2022
- v0.0.0-20220511195423-d9f249b138c3 11 May 2022
- v1.30.2-0.20220511195423-d9f249b138c3 11 May 2022
- v1.32.1-0.20220511195423-d9f249b138c3 11 May 2022
- v1.30.2-0.20220511172407-095b45ab2157 11 May 2022
- v1.30.2-0.20220506173151-4edd6ded9dc6 06 May 2022
- v0.0.0-20220506163321-0fe5d534ef62 06 May 2022
- v1.30.2-0.20220506163321-0fe5d534ef62 06 May 2022
- v1.32.1-0.20220506163321-0fe5d534ef62 06 May 2022
- v1.30.2-0.20220415165130-629fcb5adbca 15 Apr 2022
- v0.0.0-20220414005748-30b9203a2d27 14 Apr 2022
- v1.32.1-0.20220414005748-30b9203a2d27 14 Apr 2022
- v1.30.2-0.20220414005735-9cf9b0fd0541 14 Apr 2022
- v1.32.1-0.20220413222651-43bd56231eda 13 Apr 2022
- v1.32.1-0.20220413220155-cc1420bbe647 13 Apr 2022
- v1.32.1-0.20220413215731-8f8d8daa0703 13 Apr 2022
- v1.32.1-0.20220413214700-9904b379913b 13 Apr 2022
- v1.30.2-0.20220413214438-ed494ad8aba9 13 Apr 2022
- v1.32.1-0.20220413213601-602d8315d583 13 Apr 2022
- v1.32.1-0.20220413213518-2c041922e9a3 13 Apr 2022
- v0.0.0-20220413213112-a7dab62e38f8 13 Apr 2022
- v1.30.2-0.20220413212413-c34e2747865d 13 Apr 2022
- v0.0.0-20220413211447-1776783146aa 13 Apr 2022
- v1.32.1-0.20220413211447-1776783146aa 13 Apr 2022
- v1.32.1-0.20220413151608-3144ec856137 13 Apr 2022
- v0.0.0-20220411214837-c9cefb283a75 11 Apr 2022
- v1.32.1-0.20220411214837-c9cefb283a75 11 Apr 2022
- v0.0.0-20220330211417-947343309601 30 Mar 2022
- v1.32.1-0.20220330211417-947343309601 30 Mar 2022
- v0.0.0-20220330182255-66f7198c58c5 30 Mar 2022
- v1.30.2-0.20220330182255-66f7198c58c5 30 Mar 2022
- v1.32.1-0.20220330182255-66f7198c58c5 30 Mar 2022
- v0.0.0-20220330182129-e34cf6ae4832 30 Mar 2022
- v1.32.1-0.20220330173227-d5f076b9e201 30 Mar 2022
- v0.0.0-20220330170318-376a8b842a41 30 Mar 2022
- v0.0.0-20220328163243-f07b7b875567 28 Mar 2022
- v1.32.1-0.20220328163243-f07b7b875567 28 Mar 2022
- v1.32.1-0.20220321223103-27b8f1b5973b 21 Mar 2022
- v0.0.0-20220307222136-bad67e5b0894 07 Mar 2022
- v1.30.2-0.20220307222136-bad67e5b0894 07 Mar 2022
- v1.32.1-0.20220307222136-bad67e5b0894 07 Mar 2022
The newest 120 of 906 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/Shopify/sarama
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/Shopify/sarama
Is github.com/Shopify/sarama safe to use?
Vulert has no vulnerabilities on record for github.com/Shopify/sarama in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/Shopify/sarama's Vulert package health score?
Vulert scores github.com/Shopify/sarama 79/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/Shopify/sarama affected?
No. v1.38.1, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of github.com/Shopify/sarama should I use?
v1.38.1 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does github.com/Shopify/sarama have?
0 vulnerabilities are recorded for github.com/Shopify/sarama in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/Shopify/sarama vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/Shopify/sarama in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/Shopify/sarama are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/Shopify/sarama for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/Shopify/sarama version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.