VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/slack-go/slack: vulnerability history, versions and safety

github.com/slack-go/slack is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from May 2026 to Jul 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded M1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
2 in the last 12 months

Most recent disclosure 07 Jul 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/slack-go/slack vulnerabilities

Vulert verdict on github.com/slack-go/slack v0.30.1 i

Updated on 23 Oct 2026

Action needed: v0.30.1 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 82/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.30.1 — affected i
  • Vulnerabilities on record 2 over 1 year · 2 in the last year i
  • Latest disclosure 07 Jul 2026 i
  • Highest CVSS 4.8 i
  • With no published fix 0 i
  • Stars 4,971 i
  • OpenSSF scorecard 4/10 i
  • Last release this month i
  • Licence BSD-2-Clause i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/slack-go/slack, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.30.2-0.20261019212543-70905ed1bbc3 19 Oct 2026 M1 U1 BSD-2-Clause Yes Details →
v0.30.2-0.20261019195419-771340a6546d 19 Oct 2026 M1 U1 BSD-2-Clause Yes Details →
v0.30.2-0.20261017124855-a5aad5b4479e 17 Oct 2026 M1 U1 BSD-2-Clause Yes Details →
v0.30.2-0.20261015204732-d897624cad4a 15 Oct 2026 M1 U1 BSD-2-Clause Yes Details →
v0.30.1 04 Oct 2026 M1 U1 BSD-2-Clause Yes Details →
v0.30.0 04 Oct 2026 M1 U1 BSD-2-Clause Yes Details →
v0.29.1-0.20261003204350-92e8b004f33f 03 Oct 2026 M1 U1 BSD-2-Clause Yes Details →
v0.29.1-0.20260923212519-402c45d1ba0b 23 Sep 2026 M1 U1 BSD-2-Clause Yes Details →
v0.29.1-0.20260824112437-4b9cec9bdb1e 24 Aug 2026 M1 U1 BSD-2-Clause Yes Details →
v0.29.1-0.20260822141844-73cf2078ff73 22 Aug 2026 M1 U1 BSD-2-Clause Yes Details →
v0.29.1-0.20260820194611-89c86402ac81 20 Aug 2026 M1 U1 BSD-2-Clause Yes Details →
v0.29.0 15 Aug 2026 M1 U1 BSD-2-Clause Yes Details →
v0.28.0 15 Aug 2026 M1 U1 BSD-2-Clause Yes Details →
v0.27.1-0.20260815162003-72865e17d813 15 Aug 2026 M1 U1 BSD-2-Clause Yes Details →
v0.27.1-0.20260803075710-ab81038843d7 03 Aug 2026 M1 U1 BSD-2-Clause Yes Details →
v0.27.1-0.20260720092748-03b520326dc8 20 Jul 2026 M1 U1 BSD-2-Clause Yes Details →
v0.27.1-0.20260713190842-8e93d85bf1ca 13 Jul 2026 M1 U1 BSD-2-Clause Yes Details →
v0.27.0 27 Jun 2026 M1 U1 BSD-2-Clause Yes Details →
v0.26.1-0.20260623150251-b08c432fd326 23 Jun 2026 M1 U1 BSD-2-Clause Yes Details →
v0.26.1-0.20260614120105-6fd5178071da 14 Jun 2026 M1 U1 BSD-2-Clause Yes Details →
v0.26.0 14 Jun 2026 M1 U1 BSD-2-Clause Yes Details →
v0.25.0 05 Jun 2026 M1 U1 BSD-2-Clause Yes Details →
v0.24.1-0.20260604203234-f4bffa826f66 04 Jun 2026 M1 U1 BSD-2-Clause Yes Details →
v0.24.1-0.20260525115224-98066ee5026d 25 May 2026 M1 U1 BSD-2-Clause Yes Details →
v0.24.0 24 May 2026 M1 U1 BSD-2-Clause Yes Details →
v0.23.1 10 May 2026 M1 U1 BSD-2-Clause Yes Details →
v0.23.1-0.20260427153834-c6edc2762f59 27 Apr 2026 M1 U1 BSD-2-Clause Yes Details →
v0.23.0 22 Apr 2026 M1 U1 BSD-2-Clause Yes Details →
v0.22.1-0.20260420221145-2df5cfa0b974 20 Apr 2026 M1 U1 BSD-2-Clause Yes Details →
v0.22.1-0.20260417211255-e3c0e8b15630 17 Apr 2026 M1 U1 BSD-2-Clause Yes Details →
v0.22.1-0.20260416200139-4c472cd10a45 16 Apr 2026 M1 U1 BSD-2-Clause Yes Details →
v0.22.0 12 Apr 2026 M1 U1 BSD-2-Clause Yes Details →
v0.21.2-0.20260412091539-3d2c59d1ce98 12 Apr 2026 M1 U1 BSD-2-Clause Yes Details →
v0.21.1 08 Apr 2026 M1 U1 BSD-2-Clause Yes Details →
v0.21.0 05 Apr 2026 M1 U1 BSD-2-Clause Yes Details →
v0.20.1-0.20260403135138-53857701c5b1 03 Apr 2026 M1 U1 BSD-2-Clause Yes Details →
v0.20.1-0.20260331190708-6ea0678ab2db 31 Mar 2026 M1 U1 BSD-2-Clause Yes Details →
v0.20.1-0.20260330213153-462a217c577c 30 Mar 2026 M1 U1 BSD-2-Clause Yes Details →
v0.20.1-0.20260330211905-8497ee811f15 30 Mar 2026 M1 U1 BSD-2-Clause Yes Details →
v0.20.1-0.20260329210219-5daf9915f401 29 Mar 2026 M1 U1 BSD-2-Clause Yes Details →
v0.20.1-0.20260324220344-81e1a1435bb4 24 Mar 2026 M1 U1 BSD-2-Clause Yes Details →
v0.20.0 21 Mar 2026 M1 U1 BSD-2-Clause Yes Details →
v0.19.1-0.20260307142736-891d7e55c42f 07 Mar 2026 M1 U1 BSD-2-Clause Yes Details →
v0.19.0 04 Mar 2026 M1 U1 BSD-2-Clause Yes Details →
v0.18.1-0.20260226222045-777ee2f7113d 26 Feb 2026 M1 U1 BSD-2-Clause Yes Details →
v0.18.1-0.20260223073224-be04e6519745 23 Feb 2026 M1 U1 BSD-2-Clause Yes Details →
v0.18.0 21 Feb 2026 M1 U1 BSD-2-Clause Yes Details →
v0.18.0-rc2.0.20260221111040-841691540fd3 21 Feb 2026 M1 U1 BSD-2-Clause Yes Details →
v0.18.0-rc2.0.20260210163021-6551d1087976 10 Feb 2026 M1 U1 BSD-2-Clause Yes Details →
v0.18.0-rc2 28 Jan 2026 M1 U1 BSD-2-Clause Yes Details →
v0.18.0-rc1.0.20260126234853-cb885688da9c 26 Jan 2026 M1 U1 BSD-2-Clause Yes Details →
v0.18.0-rc1 26 Jan 2026 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20260125170337-131a2286b7b3 25 Jan 2026 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20260124232945-419548de3784 24 Jan 2026 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20251231182446-65e1413a1305 31 Dec 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20251216143417-be69cafa3278 16 Dec 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20251209085356-ae0b8cdb88a9 09 Dec 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20251209085318-8ae2cd15c3ec 09 Dec 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20251129154213-939e7a6b91c0 29 Nov 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20251114215222-3419af95ac53 14 Nov 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20251113215334-a57dfa042ff0 13 Nov 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20251113164847-3f3e2e55511e 13 Nov 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20251112102202-b2bd68838fcb 12 Nov 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20251105153034-f8f83c601e14 05 Nov 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20251026190350-f26cdc20edeb 26 Oct 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20250914165643-282467b3d0a4 14 Sep 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20250914164142-d1727cdc4a50 14 Sep 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20250830152613-e6bc4a09315b 30 Aug 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20250819181928-fe09361d471f 19 Aug 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20250729203450-5183ac5bcd2d 29 Jul 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.4-0.20250709004908-fe4c0d1aee31 09 Jul 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.3 04 Jul 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.2 28 Jun 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.2-0.20250628205057-ca997395267f 28 Jun 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.2-0.20250628174704-eef4b6c4017f 28 Jun 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.2-0.20250628135058-fc0ba6c6bb80 28 Jun 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.2-0.20250613104441-59e5c55c84a6 13 Jun 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.1 08 Jun 2025 M1 U1 BSD-2-Clause Yes Details →
v0.0.0-20250606172915-b4aa697fcad5 06 Jun 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.1-0.20250606172915-b4aa697fcad5 06 Jun 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.1-0.20250525163331-abcbf2b079f6 25 May 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0 24 May 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0-rc7.0.20250524212922-6ed4ea41c0d2 24 May 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0-rc7 24 May 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0-rc5.0.20250517202945-61734c3be60e 17 May 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0-rc6 17 May 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0-rc5 10 May 2025 M1 U1 BSD-2-Clause Yes Details →
v0.0.0-20250510123319-4375f2d6ffd2 10 May 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0-rc4 26 Mar 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0-rc3.0.20250324084934-cf272ff65475 24 Mar 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0-rc3 23 Mar 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0-rc2.0.20250323155125-8c65a4bdb337 23 Mar 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0-rc2.0.20250322202018-6614a0a8f7f1 22 Mar 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0-rc2 22 Mar 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0-rc1.0.20250317084850-523d99d2354b 17 Mar 2025 M1 U1 BSD-2-Clause Yes Details →
v0.16.1-0.20250315195203-3ec9f4bce877 15 Mar 2025 M1 U1 BSD-2-Clause Yes Details →
v0.17.0-rc1 15 Mar 2025 M1 U1 BSD-2-Clause Yes Details →
v0.16.1-0.20250315180205-7f9183339513 15 Mar 2025 M1 U1 BSD-2-Clause Yes Details →
v0.16.1-0.20250310134624-1e1dbbf8c2fc 10 Mar 2025 M1 U1 BSD-2-Clause Yes Details →
v0.16.1-0.20250309092410-5243beff4e19 09 Mar 2025 M1 U1 BSD-2-Clause Yes Details →
v0.16.1-0.20250307131730-a454f77660a6 07 Mar 2025 M1 U1 — Yes Details →
v0.16.1-0.20250302195354-dd95a788f3c5 02 Mar 2025 M1 U1 — Yes Details →
v0.16.1-0.20250227200538-8c0da32175d6 27 Feb 2025 M1 U1 — Yes Details →
v0.16.1-0.20250219141439-a8c2a8f5d5aa 19 Feb 2025 M1 U1 — Yes Details →
v0.16.1-0.20250212171846-98cc396d6e1a 12 Feb 2025 M1 U1 — Yes Details →
v0.15.1-0.20250206195645-209ec09999dd 06 Feb 2025 M1 U1 — Yes Details →
v0.16.0 06 Feb 2025 M1 U1 — Yes Details →
v0.15.1-0.20250201213227-76e627ab5e01 01 Feb 2025 M1 U1 — Yes Details →
v0.15.1-0.20250128150301-9c781a4166bb 28 Jan 2025 M1 U1 — Yes Details →
v0.15.1-0.20250123224112-34f9a10b71d7 23 Jan 2025 M1 U1 — Yes Details →
v0.15.1-0.20241114182643-e76401112d28 14 Nov 2024 M1 U1 — Yes Details →
v0.15.1-0.20241112193120-52fcd3dfb438 12 Nov 2024 M1 U1 — Yes Details →
v0.15.1-0.20241112193009-a99606f766e7 12 Nov 2024 M1 U1 — Yes Details →
v0.15.1-0.20241106170812-00d0e9a995c9 06 Nov 2024 M1 U1 — Yes Details →
v0.14.1-0.20241014170137-203cdb230511 14 Oct 2024 M1 U1 — Yes Details →
v0.15.0 14 Oct 2024 M1 U1 — Yes Details →
v0.14.1-0.20241014155849-c5ef90eb5811 14 Oct 2024 M1 U1 — Yes Details →
v0.14.1-0.20240919144548-447b7cdae0f1 19 Sep 2024 M1 U1 — Yes Details →
v0.14.1-0.20240917195739-cd4e26e5ec35 17 Sep 2024 M1 U1 — Yes Details →
v0.14.1-0.20240821152855-5386d65cc483 21 Aug 2024 M1 U1 — Yes Details →

The newest 120 of 408 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2026 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 2 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/slack-go/slack

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
Empty Signing Secret Vulnerability in slack-go/slack Package 4.8 medium 0.23.1 14 May 2026
Critical Vulnerability in SecretsVerifier of github.com/slack-go/slack: Accepts Empty Signing Secret N/A unrated 0.23.1 07 Jul 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/slack-go/slack

Is github.com/slack-go/slack safe to use?

Vulert records 2 vulnerabilities for github.com/slack-go/slack in Go: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/slack-go/slack's Vulert package health score?

Vulert scores github.com/slack-go/slack 82/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/slack-go/slack affected?

Yes. v0.30.1, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/slack-go/slack should I use?

v0.30.1 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/slack-go/slack have?

2 vulnerabilities are recorded for github.com/slack-go/slack in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/slack-go/slack vulnerabilities disclosed?

2 vulnerabilities were recorded for github.com/slack-go/slack in the last 12 months, and the oldest entry in this database dates to 14 May 2026. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/slack-go/slack are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/slack-go/slack for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/slack-go/slack version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.