Vulnerability Database · Go · Package report
github.com/spdx/tools-golang: vulnerability history, versions and safety
github.com/spdx/tools-golang is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/spdx/tools-golang v0.5.7 i
Updated on 23 Oct 2026
Good news: v0.5.7, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Sustainable
- Popularity Niche
- Community Quiet
What to do: Stay on v0.5.7 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.5.7 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v0.5.7 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 172 i
- OpenSSF scorecard 4/10 i
- Last release 9 months ago i
- Licence Apache-2.0 i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/spdx/tools-golang, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v0.6.0-rc3.0.20261014134323-ea62df8af1cc 14 Oct 2026
- v0.6.0-rc3.0.20260930141419-27c78ddd3ee1 30 Sep 2026
- v0.6.0-rc3.0.20260723142846-bb84d640776a 23 Jul 2026
- v0.6.0-rc3.0.20260710232517-1e0d82e8b4c7 10 Jul 2026
- v0.6.0-rc3.0.20260625232421-3f8c75addedd 25 Jun 2026
- v0.6.0-rc4 18 Jun 2026
- v0.5.8-0.20260223173840-0ac8cc62b650 23 Feb 2026
- v0.6.0-rc3 23 Feb 2026
- v0.5.8-0.20260116164601-b6fd75751979 16 Jan 2026
- v0.6.0-rc2 15 Jan 2026
- v0.5.7-0.20260109225645-a9d62f6be946 09 Jan 2026
- v0.6.0-rc1 09 Jan 2026
- v0.5.7 07 Jan 2026
- v0.5.7-0.20260107013900-28116d2a82c9 07 Jan 2026
- v0.5.6 05 Dec 2025
- v0.5.6-0.20251205144622-3d64f16d63b9 05 Dec 2025
- v0.5.6-0.20251126163422-254d7a7581b9 26 Nov 2025
- v0.5.6-0.20251104190222-e6786a8a0710 04 Nov 2025
- v0.5.6-0.20251014151249-49501ad77036 14 Oct 2025
- v0.0.0-20250908142114-e95cf7fdfd79 08 Sep 2025
- v0.5.6-0.20250908142114-e95cf7fdfd79 08 Sep 2025
- v0.5.6-0.20250702133706-916d962afe5a 02 Jul 2025
- v0.5.6-0.20250616235633-bed66bb62adb 16 Jun 2025
- v0.5.6-0.20241227171716-d09396a0c5f3 27 Dec 2024
- v0.5.6-0.20241125221755-f6e45fdb9e4e 25 Nov 2024
- v0.5.6-0.20241125221717-c5e16586435a 25 Nov 2024
- v0.5.5 17 Jun 2024
- v0.5.5-0.20240617020136-9db247b854b9 17 Jun 2024
- v0.5.5-0.20240520233830-57d4b8e0dfdd 20 May 2024
- v0.5.5-0.20240520144838-282609e841df 20 May 2024
- v0.5.4 16 Apr 2024
- v0.5.4-0.20240416160353-aa7bfadce5f6 16 Apr 2024
- v0.5.4-0.20240304222056-8baafa1a79c4 04 Mar 2024
- v0.5.4-0.20231220150801-44984eb25621 20 Dec 2023
- v0.5.4-0.20231220143307-254541cdcf8b 20 Dec 2023
- v0.0.0-20231108154018-0c0f394b5e1a 08 Nov 2023
- v0.5.4-0.20231108154018-0c0f394b5e1a 08 Nov 2023
- v0.5.4-0.20231016151844-be2fd6101182 16 Oct 2023
- v0.5.4-0.20231016151822-7f95b018c043 16 Oct 2023
- v0.5.3 27 Jul 2023
- v0.5.3-0.20230727170605-6a271aaa7370 27 Jul 2023
- v0.5.2 06 Jun 2023
- v0.5.2-0.20230606135218-4b477e88fcb3 06 Jun 2023
- v0.5.2-0.20230606024818-e861b35788ac 06 Jun 2023
- v0.5.2-0.20230606004010-80032f1b16d3 06 Jun 2023
- v0.5.1 26 May 2023
- v0.5.1-0.20230522192902-93754d38a02f 22 May 2023
- v0.5.1-0.20230518132908-944e8cbc0ed3 18 May 2023
- v0.5.1-0.20230512133457-13245e003bc1 12 May 2023
- v0.5.0 24 Mar 2023
- v0.5.0-rc1.0.20230324161335-ee0b98bce00f 24 Mar 2023
- v0.5.0-rc1.0.20230324161247-a411a727c60c 24 Mar 2023
- v0.5.0-rc1.0.20230306150700-3ccd09f00f81 06 Mar 2023
- v0.5.0-rc1.0.20230303203030-76e74f66602e 03 Mar 2023
- v0.5.0-rc1.0.20230216160004-105e17fd98ed 16 Feb 2023
- v0.5.0-rc1.0.20230215154647-17eb3a7befa1 15 Feb 2023
- v0.5.0-rc1.0.20230209194435-cdce85b59fc0 09 Feb 2023
- v0.5.0-rc1.0.20230201135421-2d7b6ef63e41 01 Feb 2023
- v0.5.0-rc1.0.20230126174429-b7d3ce40f74d 26 Jan 2023
- v0.5.0-rc1.0.20230126174103-8a88c6cc0aed 26 Jan 2023
- v0.5.0-rc1.0.20230120220201-f8e354af6737 20 Jan 2023
- v0.4.1-0.20230117192814-908a516e6053 17 Jan 2023
- v0.5.0-rc1 17 Jan 2023
- v0.4.1-0.20230117185512-4373dbfe780e 17 Jan 2023
- v0.4.0 12 Jan 2023
- v0.3.1-0.20230111204047-32229f99919c 11 Jan 2023
- v0.3.1-0.20230111203912-7f2c5bdb3d71 11 Jan 2023
- v0.0.0-20230104082527-d6f58551be3f 04 Jan 2023
- v0.3.1-0.20230104082527-d6f58551be3f 04 Jan 2023
- v0.3.1-0.20221229074128-7782317b3e7e 29 Dec 2022
- v0.3.1-0.20221206003528-f843a8c04500 06 Dec 2022
- v0.0.0-20221205121515-6fe9d226281a 05 Dec 2022
- v0.3.1-0.20221205121515-6fe9d226281a 05 Dec 2022
- v0.3.1-0.20221201014536-04d9c4663b00 01 Dec 2022
- v0.0.0-20221108182156-8a01147e6342 08 Nov 2022
- v0.3.1-0.20221108182156-8a01147e6342 08 Nov 2022
- v0.2.1-0.20221107202459-2f3dd372ecac 07 Nov 2022
- v0.3.1-0.20221107202459-2f3dd372ecac 07 Nov 2022
- v0.3.1-0.20221031202107-e20ab888a044 31 Oct 2022
- v0.3.1-0.20221024171820-55fcfedf4681 24 Oct 2022
- v0.3.1-0.20221011172847-d326e1063b82 11 Oct 2022
- v0.3.1-0.20221007161131-066a798c363d 07 Oct 2022
- v0.3.1-0.20221006233604-11771eea2669 06 Oct 2022
- v0.3.1-0.20221003161519-fb7fe8874d01 03 Oct 2022
- v0.3.1-0.20220928133246-97ef16cfc20c 28 Sep 2022
- v0.0.0-20220818163346-5eb9315c0c55 18 Aug 2022
- v0.3.1-0.20220818163346-5eb9315c0c55 18 Aug 2022
- v0.3.1-0.20220730201043-e6346303fe2d 30 Jul 2022
- v0.3.1-0.20220720024324-9ae1bd2f8e0d 20 Jul 2022
- v0.0.0-20220515142548-a532726dbb7a 15 May 2022
- v0.3.1-0.20220515142548-a532726dbb7a 15 May 2022
- v0.3.1-0.20220427011611-c21431fe8bc9 27 Apr 2022
- v0.3.1-0.20220426170905-065db9a899b5 26 Apr 2022
- v0.3.1-0.20220426010136-3c7fd178c3b4 26 Apr 2022
- v0.0.0-20220403141954-94b44ab08e2b 03 Apr 2022
- v0.3.0 03 Apr 2022
- v0.3.0-rc1.0.20220331014301-fa24fac85dd5 31 Mar 2022
- v0.3.0-rc1.0.20220331011159-dd98559881cd 31 Mar 2022
- v0.3.0-rc1.0.20220331003042-7e3a22cfccbd 31 Mar 2022
- v0.2.1-0.20220327161702-d93d09feb83e 27 Mar 2022
- v0.3.0-rc1 27 Mar 2022
- v0.2.1-0.20220326202635-6ce7cd028e52 26 Mar 2022
- v0.2.1-0.20220326202011-61e7c1bffc8b 26 Mar 2022
- v0.2.1-0.20220313172103-4250e11a6f1f 13 Mar 2022
- v0.2.1-0.20220313160705-9eeb46e841a8 13 Mar 2022
- v0.2.1-0.20220312160742-18a4da026eca 12 Mar 2022
- v0.2.1-0.20220221222248-8c2157410227 21 Feb 2022
- v0.2.1-0.20210816200728-1d27f444b396 16 Aug 2021
- v0.2.1-0.20210813154429-0faf540b7b44 13 Aug 2021
- v0.2.1-0.20210810180203-dbd63eaf33ee 10 Aug 2021
- v0.0.0-20210731201545-9813e3e9ab95 31 Jul 2021
- v0.2.1-0.20210731201545-9813e3e9ab95 31 Jul 2021
- v0.2.1-0.20210724132348-81c7677913ce 24 Jul 2021
- v0.2.1-0.20210715052217-40122298d1b7 15 Jul 2021
- v0.0.0-20210704171508-c8724656ef81 04 Jul 2021
- v0.2.1-0.20210704171508-c8724656ef81 04 Jul 2021
- v0.2.0 04 Jul 2021
- v0.1.1-0.20210704150440-fe1c1e7319f0 04 Jul 2021
- v0.1.1-0.20210704145812-edbff31685f9 04 Jul 2021
- v0.0.0-20210616182839-9b060e5ac8c4 16 Jun 2021
The newest 120 of 150 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/spdx/tools-golang
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/spdx/tools-golang
Is github.com/spdx/tools-golang safe to use?
Vulert has no vulnerabilities on record for github.com/spdx/tools-golang in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/spdx/tools-golang's Vulert package health score?
Vulert scores github.com/spdx/tools-golang 71/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/spdx/tools-golang affected?
No. v0.5.7, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of github.com/spdx/tools-golang should I use?
v0.5.7 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does github.com/spdx/tools-golang have?
0 vulnerabilities are recorded for github.com/spdx/tools-golang in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/spdx/tools-golang vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/spdx/tools-golang in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/spdx/tools-golang are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/spdx/tools-golang for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/spdx/tools-golang version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.