Vulnerability Database · Go · Package report
github.com/shopspring/decimal: vulnerability history, versions and safety
github.com/shopspring/decimal is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/shopspring/decimal v1.6.0 i
Updated on 23 Oct 2026
Good news: v1.6.0, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Sustainable
- Popularity Key ecosystem project
- Community Quiet
What to do: Stay on v1.6.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.6.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v1.6.0 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 7,497 i
- OpenSSF scorecard 2/10 i
- Last release this month i
- Licence MIT i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/shopspring/decimal, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v1.6.0 18 Oct 2026
- v1.5.1-0.20261017214512-bed77f5cb683 17 Oct 2026
- v1.5.1-0.20261017193215-4fef1ec699eb 17 Oct 2026
- v1.5.1-0.20261016211540-1863390911dd 16 Oct 2026
- v1.5.1-0.20261015180504-ec4943b1a3d8 15 Oct 2026
- v1.5.1-0.20261014172742-e799c20820a0 14 Oct 2026
- v1.5.1-0.20261010211759-511ed65a1218 10 Oct 2026
- v1.5.0 05 Oct 2026
- v1.4.1-0.20261005095831-aed8543466e8 05 Oct 2026
- v1.4.1-0.20260819210736-ca4740823783 19 Aug 2026
- v1.4.1-0.20260629095829-3090cc487feb 29 Jun 2026
- v0.0.0-20260315220700-400829b4bf08 15 Mar 2026
- v1.4.1-0.20260315220700-400829b4bf08 15 Mar 2026
- v1.4.1-0.20260308224236-6540310a7d8c 08 Mar 2026
- v1.4.1-0.20260213151844-9620fb7d0776 13 Feb 2026
- v1.4.1-0.20251225225832-e1e92bff9391 25 Dec 2025
- v0.0.0-20250624230423-08afb3551736 24 Jun 2025
- v1.4.1-0.20250624230423-08afb3551736 24 Jun 2025
- v1.4.1-0.20250623190738-01bb2034de74 23 Jun 2025
- v0.0.0-20240412141923-a1bdfc355e9c 12 Apr 2024
- v1.3.2-0.20240412141923-a1bdfc355e9c 12 Apr 2024
- v1.4.0 12 Apr 2024
- v1.3.2-0.20240408143820-80ec94005410 08 Apr 2024
- v1.3.2-0.20240407183344-2fa107d0fe90 07 Apr 2024
- v1.3.2-0.20240405194323-645a76e5b0ae 05 Apr 2024
- v1.3.2-0.20240405194105-ed8f76e89381 05 Apr 2024
- v1.3.2-0.20240404143531-0e69d5cd53c5 04 Apr 2024
- v1.3.2-0.20240403201219-547861c49ba2 03 Apr 2024
- v1.3.2-0.20240402221627-78289cc84470 02 Apr 2024
- v0.0.0-20240401200225-2b68c56fe017 01 Apr 2024
- v1.3.2-0.20240401200225-2b68c56fe017 01 Apr 2024
- v1.3.2-0.20240219221343-d00399e16190 19 Feb 2024
- v0.0.0-20240124224815-57a340d853be 24 Jan 2024
- v1.3.2-0.20240124224815-57a340d853be 24 Jan 2024
- v1.3.2-0.20240115195638-b79c571f8011 15 Jan 2024
- v1.3.2-0.20240115195005-142a0cf2f215 15 Jan 2024
- v1.3.2-0.20240110010845-7b4ffbcd3c86 10 Jan 2024
- v1.3.2-0.20231231121133-1df8fb30155b 31 Dec 2023
- v1.3.2-0.20231229174757-572d78e32d0d 29 Dec 2023
- v1.3.2-0.20231229115416-304c9d67940d 29 Dec 2023
- v1.3.2-0.20231229005948-12e9241da283 29 Dec 2023
- v1.3.2-0.20231227145343-6926256b7192 27 Dec 2023
- v0.0.0-20230723151323-22e39a3e4201 23 Jul 2023
- v1.3.1-0.20230723151323-22e39a3e4201 23 Jul 2023
- v1.3.2-0.20230723151323-22e39a3e4201 23 Jul 2023
- v0.0.0-20220418215426-f55dd564545c 18 Apr 2022
- v1.3.2-0.20220418215426-f55dd564545c 18 Apr 2022
- v0.0.0-20211021092223-fa3b22f4d484 21 Oct 2021
- v1.3.2-0.20211021092223-fa3b22f4d484 21 Oct 2021
- v1.3.1 20 Oct 2021
- v1.3.1-0.20211020111751-683f5e1a7e18 20 Oct 2021
- v1.3.1-0.20211020111107-bc96f543c22f 20 Oct 2021
- v1.3.0 13 Oct 2021
- v1.2.1-0.20211012101139-283b007e5fbc 12 Oct 2021
- v1.2.1-0.20211012090745-3259e0a2de65 12 Oct 2021
- v1.2.1-0.20211012001736-013e52d4e9a5 12 Oct 2021
- v1.2.1-0.20211011163938-46544472a552 11 Oct 2021
- v1.2.1-0.20210912113752-9ffd602a49cc 12 Sep 2021
- v1.2.1-0.20210910134844-b11a7c46d78f 10 Sep 2021
- v1.2.1-0.20210909110313-483a047db9d0 09 Sep 2021
- v0.0.0-20210622222456-cc4584f0a5de 22 Jun 2021
- v1.2.1-0.20210622222456-cc4584f0a5de 22 Jun 2021
- v0.0.0-20210329231237-501661573f60 29 Mar 2021
- v1.2.1-0.20210329231237-501661573f60 29 Mar 2021
- v0.0.0-20210314210956-f77bb078286a 14 Mar 2021
- v1.2.1-0.20210314210956-f77bb078286a 14 Mar 2021
- v1.2.1-0.20210218223250-9328d16578e0 18 Feb 2021
- v1.2.1-0.20210117235046-99f4d74cf297 17 Jan 2021
- v0.0.0-20210110042647-2740f7f782ac 10 Jan 2021
- v1.2.1-0.20210110042647-2740f7f782ac 10 Jan 2021
- v1.2.1-0.20210110041512-0cada0bdfec0 10 Jan 2021
- v0.0.0-20201211184111-8bd41ac55db3 11 Dec 2020
- v1.2.1-0.20201211184111-8bd41ac55db3 11 Dec 2020
- v1.2.1-0.20201201101553-66332b32a9d5 01 Dec 2020
- v1.2.1-0.20201119052329-13425bb201a7 19 Nov 2020
- v0.0.0-20200914172903-ebbf8bbe3674 14 Sep 2020
- v1.2.1-0.20200914172903-ebbf8bbe3674 14 Sep 2020
- v0.0.0-20200820214745-5a22b86679d6 20 Aug 2020
- v1.2.1-0.20200820214745-5a22b86679d6 20 Aug 2020
- v0.0.0-20200707070546-867ed12000cf 07 Jul 2020
- v1.2.1-0.20200707070546-867ed12000cf 07 Jul 2020
- v1.2.1-0.20200630232032-6fe01c1abd8a 30 Jun 2020
- v0.0.0-20200428212309-2568a2945947 28 Apr 2020
- v1.2.0 28 Apr 2020
- v0.0.0-20200428023536-480f653de814 28 Apr 2020
- v1.1.1-0.20200428023536-480f653de814 28 Apr 2020
- v0.0.0-20200427060321-c939845a686f 27 Apr 2020
- v1.1.1-0.20200427060321-c939845a686f 27 Apr 2020
- v0.0.0-20200419222939-1884f454f8ea 19 Apr 2020
- v1.1.1-0.20200419222939-1884f454f8ea 19 Apr 2020
- v0.0.0-20200419221835-f1c1aead5aa5 19 Apr 2020
- v1.1.1-0.20200419221835-f1c1aead5aa5 19 Apr 2020
- v0.0.0-20200419172439-feafbe1d9575 19 Apr 2020
- v1.1.1-0.20200419172439-feafbe1d9575 19 Apr 2020
- v0.0.0-20200227204121-bda3065a895e 27 Feb 2020
- v0.0.0-20200227202807-02e2044944cc 27 Feb 2020
- v1.1.1-0.20200227202807-02e2044944cc 27 Feb 2020
- v0.0.0-20200226005030-a08b92da27ed 26 Feb 2020
- v1.1.1-0.20200226005030-a08b92da27ed 26 Feb 2020
- v0.0.0-20200226004403-6c07c6ca865c 26 Feb 2020
- v1.1.1-0.20200226004403-6c07c6ca865c 26 Feb 2020
- v0.0.0-20200105231215-408a2507e114 05 Jan 2020
- v1.1.1-0.20200105231215-408a2507e114 05 Jan 2020
- v0.0.0-20200105144653-96defcb63c04 05 Jan 2020
- v1.1.1-0.20200105144653-96defcb63c04 05 Jan 2020
- v0.0.0-20191130220956-4a0525fe73fc 30 Nov 2019
- v0.0.0-20191130220710-360f2bc03045 30 Nov 2019
- v1.1.1-0.20191130220710-360f2bc03045 30 Nov 2019
- v0.0.0-20191129051706-bc70c3beb98b 29 Nov 2019
- v1.1.1-0.20191129051706-bc70c3beb98b 29 Nov 2019
- v0.0.0-20191125035519-b054a8dfd10d 25 Nov 2019
- v1.1.1-0.20191125035519-b054a8dfd10d 25 Nov 2019
- v0.0.0-20191009025716-f1972eb1d1f5 09 Oct 2019
- v1.1.1-0.20191009025716-f1972eb1d1f5 09 Oct 2019
- v1.1.1-0.20191009024908-2677b5dba819 09 Oct 2019
- v0.0.0-20190905144223-a36b5d85f337 05 Sep 2019
- v1.1.1-0.20190905144223-a36b5d85f337 05 Sep 2019
- v0.0.0-20190904223613-75bb2cb98e71 04 Sep 2019
- v1.1.1-0.20190904223613-75bb2cb98e71 04 Sep 2019
- v0.0.0-20190617101300-62587fc365bf 17 Jun 2019
The newest 120 of 195 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/shopspring/decimal
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/shopspring/decimal
Is github.com/shopspring/decimal safe to use?
Vulert has no vulnerabilities on record for github.com/shopspring/decimal in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/shopspring/decimal's Vulert package health score?
Vulert scores github.com/shopspring/decimal 82/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/shopspring/decimal affected?
No. v1.6.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
How many vulnerabilities does github.com/shopspring/decimal have?
0 vulnerabilities are recorded for github.com/shopspring/decimal in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/shopspring/decimal vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/shopspring/decimal in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/shopspring/decimal are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/shopspring/decimal for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/shopspring/decimal version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.