VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/skupperproject/skupper: vulnerability history, versions and safety

github.com/skupperproject/skupper is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, first recorded in Jul 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded H1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/skupperproject/skupper vulnerabilities

Vulert verdict on github.com/skupperproject/skupper v0.0.0-20261022173849-ec41f65b539c i

Updated on 23 Oct 2026

Action needed: v0.0.0-20261022173849-ec41f65b539c has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 80/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Widely used
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.0.0-20261022173849-ec41f65b539c — affected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 22 Jul 2024 i
  • Highest CVSS 5.9 i
  • With no published fix 0 i
  • Stars 704 i
  • OpenSSF scorecard 4/10 i
  • Last release this month i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/skupperproject/skupper, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20261022173849-ec41f65b539c 22 Oct 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20261022150324-3153d06e2cff 22 Oct 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20261020212236-17966790edcb 20 Oct 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20261019111505-15c974d1982b 19 Oct 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20261014173410-1112742f80ad 14 Oct 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20261008165422-6f5c950be35e 08 Oct 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20261006165820-7e3dd8f9adb0 06 Oct 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20261006151121-8bc6cec91a07 06 Oct 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20261006140911-50a4c744a8c1 06 Oct 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20261001215801-c5c93518b371 01 Oct 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260930194054-131ab9cb7700 30 Sep 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260929201410-2f1738e78ea0 29 Sep 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260928150513-2f5635897406 28 Sep 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260921182047-70274cff5861 21 Sep 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260916170943-d562c4cecb38 16 Sep 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260915025143-b50fd8538760 15 Sep 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260914203356-94e37fae54a0 14 Sep 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260914194202-cdc4b50a7ae7 14 Sep 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260910194533-f2a6f7d2e68a 10 Sep 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260908133542-2fd49d7b1324 08 Sep 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260901210058-44fb60fa3706 01 Sep 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260821180221-06223ca40304 21 Aug 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260817180322-3cd2486b1915 17 Aug 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260814153830-27d974bb69af 14 Aug 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260813161923-b5ec0ba49ac2 13 Aug 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260813131157-8dbfca262e83 13 Aug 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260812190451-6b9443288c36 12 Aug 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260812160644-b9a3d53e30ab 12 Aug 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260805142639-ef654a9697ce 05 Aug 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260804183113-30eaa528cae3 04 Aug 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260729210659-8fcff848d2ee 29 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260729155348-559eb89ba7ae 29 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260728165049-dbb3c14c2b08 28 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260723132507-80b1ba6de37f 23 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260720214749-e1fde23e56e6 20 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260720185630-fdaaf7aa1ca8 20 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260720162634-d4fe4c68e6fc 20 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260717155349-a496559ebf9c 17 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260716161845-a754458b77a2 16 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260714190751-940c3a9dba20 14 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260710170418-62dda1967001 10 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260710153454-cf110f041366 10 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260707192704-172317cd4e96 07 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260706175315-bb3c3831a5b3 06 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260702160319-143bc9724237 02 Jul 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260630184901-e0dd9ce02fda 30 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260630152713-2f47dfcfcca1 30 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260630134238-7d1d4c8a5d2b 30 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260629194748-a2f52cee893c 29 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260629144610-d5d4190abc7e 29 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260624191930-72bd9e726b75 24 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260619140926-6f4f2b3f2768 19 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260618132921-7b5debe15061 18 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260617200231-429fcf4f7f46 17 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260617121114-2de79a8062d4 17 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260611183328-3822580273e2 11 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260611132743-eab167fed24d 11 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260604181552-4035c0e773af 04 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260603155346-e2dd32c1af51 03 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260603133334-5f1ada1125b8 03 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260603125139-7171aba9b2d7 03 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260602184803-f3305139e429 02 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260601194218-e4d1381d9c37 01 Jun 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260529204126-856efc4cf3fb 29 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260529081719-705c479456f7 29 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260528173210-d2563d852ef4 28 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260527191411-88fde51af589 27 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260527180705-c943eaa38e6d 27 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260527173039-a098a31b9433 27 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260526210744-e7883d1dfe7b 26 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260526163106-dcac51335e92 26 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260522212137-2cdb3a8bba97 22 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260520174859-98439f59d216 20 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260519181229-7d9d7422057e 19 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260518175922-b9be21d118e5 18 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260514142654-207736bd5060 14 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260513135546-1056ffcb9763 13 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260512154346-55583c46dae3 12 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260511155645-19caddef03d6 11 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260511155413-34b40f012eb0 11 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260511150034-a29f5fe5184c 11 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260508214834-86b4947165a1 08 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260508200521-9645867a99ca 08 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260508150938-8abd7a68c059 08 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260504200921-6b6ae666d5c5 04 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260501155910-b7ffb095ae8d 01 May 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260428180537-c7296b8db259 28 Apr 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260423132508-4f2a11319219 23 Apr 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260421140301-9c42a95ed24b 21 Apr 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260420125626-688f4f54852b 20 Apr 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260410170632-725a609db5a2 10 Apr 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260402180423-4507dd2273df 02 Apr 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260331123453-f1d555b10a60 31 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260324153637-b93ec9c63008 24 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260316160647-8880c36e3cec 16 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260313184653-acf2c90899ee 13 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260313182938-d1dffb1a7369 13 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260313175233-6b2979ff21bf 13 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260313132723-f0e5816a8499 13 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260309135841-89b9d1589157 09 Mar 2026 H1 U1 Apache-2.0 Yes Details →
v0.0.0-20260303201910-00a13b585e29 03 Mar 2026 H1 U1 — Yes Details →
v0.0.0-20260302152519-536d2cd8b4c4 02 Mar 2026 H1 U1 — Yes Details →
v0.0.0-20260225205313-9ac367b3b24c 25 Feb 2026 H1 U1 — Yes Details →
v0.0.0-20260223161341-68cdd20bf891 23 Feb 2026 H1 U1 — Yes Details →
v0.0.0-20260219204058-d40e048c9cbc 19 Feb 2026 H1 U1 — Yes Details →
v0.0.0-20260219173346-6c3ea1ae613f 19 Feb 2026 H1 U1 — Yes Details →
v0.0.0-20260212150011-bcb2e5797496 12 Feb 2026 H1 U1 — Yes Details →
v0.0.0-20260212143843-d9ed2f0998f0 12 Feb 2026 H1 U1 — Yes Details →
v0.0.0-20260211184833-b30ab4ab624c 11 Feb 2026 H1 U1 — Yes Details →
v0.0.0-20260210175555-6066f68f5505 10 Feb 2026 H1 U1 — Yes Details →
v0.0.0-20260206192036-ce10f83e0e55 06 Feb 2026 H1 U1 — Yes Details →
v0.0.0-20260202172831-fc064898f4db 02 Feb 2026 H1 U1 — Yes Details →
v0.0.0-20260201211432-fbc26ded238d 01 Feb 2026 H1 U1 — Yes Details →
v0.0.0-20260130162737-7fb8615cf4b3 30 Jan 2026 H1 U1 — Yes Details →
v0.0.0-20260130113001-82064f63718f 30 Jan 2026 H1 U1 — Yes Details →
v0.0.0-20260129170449-5b58612222e8 29 Jan 2026 H1 U1 — Yes Details →
v0.0.0-20260127171919-fcb7f45fb8d1 27 Jan 2026 H1 U1 — Yes Details →
v0.0.0-20260121212911-643627cedc28 21 Jan 2026 H1 U1 — Yes Details →
v0.0.0-20260121175051-efacf4981eb0 21 Jan 2026 H1 U1 — Yes Details →
v0.0.0-20260121143006-b4f3ba943b08 21 Jan 2026 H1 U1 — Yes Details →

The newest 120 of 852 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/skupperproject/skupper

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2024-6535: Skupper - Static Cookie Secret in openshift oauth-proxy 5.9 high 0.0.0-20240703184342-c26bce4079ff 17 Jul 2024
CVE-2024-6535: Static Cookie Secret Vulnerability in Skupper N/A unrated 0.0.0-20240703184342-c26bce4079ff 22 Jul 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/skupperproject/skupper

Is github.com/skupperproject/skupper safe to use?

Vulert records 2 vulnerabilities for github.com/skupperproject/skupper in Go: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/skupperproject/skupper's Vulert package health score?

Vulert scores github.com/skupperproject/skupper 80/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/skupperproject/skupper affected?

Yes. v0.0.0-20261022173849-ec41f65b539c, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does github.com/skupperproject/skupper have?

2 vulnerabilities are recorded for github.com/skupperproject/skupper in the Go ecosystem: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/skupperproject/skupper vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/skupperproject/skupper in the last 12 months, and the oldest entry in this database dates to 17 Jul 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/skupperproject/skupper are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/skupperproject/skupper for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/skupperproject/skupper version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.