VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/square/squalor: vulnerability history, versions and safety

github.com/square/squalor is a package in the Go ecosystem. Vulert records 3 vulnerabilities for it across 120 releases, from Jan 2023 to Feb 2023. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
3 vulnerabilities recorded C1 U2
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/square/squalor vulnerabilities

Vulert verdict on github.com/square/squalor v0.0.0-20220330195509-e62ea2a4f703 i

Updated on 23 Oct 2026

Action needed: v0.0.0-20220330195509-e62ea2a4f703 has 3 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 56/100
  • Security Minor issues
  • Maintenance Slowing
  • Popularity Niche
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.0.0-20220330195509-e62ea2a4f703 — affected i
  • Vulnerabilities on record 3 over 1 year · 0 in the last year i
  • Latest disclosure 01 Feb 2023 i
  • Highest CVSS 9.8 i
  • With no published fix 0 i
  • Stars 207 i
  • OpenSSF scorecard 3/10 i
  • Last release 54 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/square/squalor, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.1-0.20261008003415-f72d82766c5a 08 Oct 2026 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20260609134155-897e1e9ca345 09 Jun 2026 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20260608154707-4f7792d014e4 08 Jun 2026 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20260306133755-db0a3e9a0218 06 Mar 2026 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20250304205139-7a90153deab3 04 Mar 2025 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20241129221203-487c04f7862a 29 Nov 2024 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20241017181447-732195d471e7 17 Oct 2024 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20241007142654-36440e107841 07 Oct 2024 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20240220192451-462ac07383b1 20 Feb 2024 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20231103192214-2dbff314d1dc 03 Nov 2023 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20231103144601-f1c19e51ba8d 03 Nov 2023 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20231031210719-b26b7e47ba1d 31 Oct 2023 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20231031193010-58a43f4c5a74 31 Oct 2023 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20231031184442-5a2c2225f621 31 Oct 2023 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20231025210001-7637fd423146 25 Oct 2023 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20231017163033-472c69cafb39 17 Oct 2023 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20230801195533-961ed7ac925b 01 Aug 2023 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20230119000517-ef60785a681e 19 Jan 2023 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20220421194351-3d9a088802f8 21 Apr 2022 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20220421194351-3d9a088802f8 21 Apr 2022 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20220421161220-d1b9efed62a4 21 Apr 2022 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20220418160240-5b7b941ca73b 18 Apr 2022 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20220418155845-dfae94087f8e 18 Apr 2022 C1 U2 Apache-2.0 Yes Details →
v0.0.1-0.20220415203748-abe23ac1f4ea 15 Apr 2022 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20220415203722-f6ea5733cc92 15 Apr 2022 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20220330195509-e62ea2a4f703 30 Mar 2022 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20220330194304-5e7eeaab4005 30 Mar 2022 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20210603171532-8627b8e53a77 03 Jun 2021 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20210603165432-2c22804e7587 03 Jun 2021 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20210526222150-ad83d6e83ece 26 May 2021 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20210526214752-44ebe73a9cb3 26 May 2021 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20210526213257-39e45c0b2e95 26 May 2021 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20210526212513-f94bbce60b02 26 May 2021 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20210309210153-c53fd3d7c975 09 Mar 2021 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20210302013816-8635fedb6983 02 Mar 2021 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20201020210731-b4ac149da613 20 Oct 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20201020191800-34c9df3c6b5e 20 Oct 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20201020182638-7757a14ddb4f 20 Oct 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20201020181805-35f56692401b 20 Oct 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20201019164544-ab6969ca9697 19 Oct 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20201009175745-daf497b6f180 09 Oct 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200827183003-58948b7d05c4 27 Aug 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200827173442-1cb0708e1f55 27 Aug 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200722213924-58a8e4213020 22 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200722212847-997d88e7c6c6 22 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200721213843-8e99908ff2f2 21 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200721213707-be4919448694 21 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200721211626-146d1f343e89 21 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200721211152-02a2399fd721 21 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200721205855-11e19cf8cd28 21 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200721203650-13a3d30d8ebc 21 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200721042554-f492ab8666a8 21 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200721042409-f3d770445576 21 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200721042151-5863824f1912 21 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200719071619-dd819d848136 19 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200719063205-95e0951f240d 19 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200719062903-a522b630ba23 19 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200719062339-d362829805c6 19 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200719055805-9a1e2ef4bd6d 19 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200719043553-94e64be99869 19 Jul 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200512200528-9c8dd1c27432 12 May 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200512200101-18ab2c44a593 12 May 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200427150256-14b2e34d7797 27 Apr 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200427024036-f98089c77069 27 Apr 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200306154055-f6f0a47cc344 06 Mar 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20200306152614-033350b8596b 06 Mar 2020 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20190215211619-afa27bf1201c 15 Feb 2019 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20190215211400-221f707f9ebd 15 Feb 2019 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20190211214718-710d00042965 11 Feb 2019 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20190130232658-4f997bd98ff0 30 Jan 2019 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20181205181119-7edba73e9743 05 Dec 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20181112152738-e211a2ae9706 12 Nov 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20181111184101-13e296b128dc 11 Nov 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180823163454-2f91055b65a3 23 Aug 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180823031157-6fd4e36fd7fa 23 Aug 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180712192937-fa8ce0ee1651 12 Jul 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180712190739-1e7614571b28 12 Jul 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180711153333-fc0a59a855e7 11 Jul 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180711153008-56d5a07afd74 11 Jul 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180711145923-4bc73cf07a9f 11 Jul 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180711145653-33ffb5c16b02 11 Jul 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180703202709-a53b5356f036 03 Jul 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180703202546-820b509c7cc4 03 Jul 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180621183742-9be43cb63c77 21 Jun 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180620200810-ed28ad26c946 20 Jun 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180613185126-10e091e8bb6d 13 Jun 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180613182451-057eb7a967c2 13 Jun 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180613171148-28265d36fdd1 13 Jun 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180612210500-c338106786e6 12 Jun 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180612205225-7856d8f2b88c 12 Jun 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180611185837-d0cad48407a4 11 Jun 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180611184627-6fe74107f627 11 Jun 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180424021525-439ee43eae62 24 Apr 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180424021456-8408af6a4ab1 24 Apr 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180423193639-0e850a1cc401 23 Apr 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180221000245-83a1e93f9023 21 Feb 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180220235425-c0ebe18f65a4 20 Feb 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180220235425-f16fd0b8176f 20 Feb 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180212153305-756a8e3bc90d 12 Feb 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180208192337-2b52f38bec46 08 Feb 2018 C1 U2 Apache-2.0 Yes Details →
v0.0.0-20180208191649-95833cb9111f 08 Feb 2018 C1 U2 — Yes Details →
v0.0.0-20180208191516-91e2fbe73697 08 Feb 2018 C1 U2 — Yes Details →
v0.0.0-20180208191005-87faa7aacaf0 08 Feb 2018 C1 U2 — Yes Details →
v0.0.0-20180109181608-c3a1c62d9c3d 09 Jan 2018 C1 U2 — Yes Details →
v0.0.0-20180109175801-7e0ea3006cf5 09 Jan 2018 C1 U2 — Yes Details →
v0.0.0-20170929201616-af4b859d17b5 29 Sep 2017 C1 U2 — Yes Details →
v0.0.0-20170929201201-dc1e28931c51 29 Sep 2017 C1 U2 — Yes Details →
v0.0.0-20170927155617-d67ce7c147e5 27 Sep 2017 C1 U2 — Yes Details →
v0.0.0-20170926182448-21aaca79704d 26 Sep 2017 C1 U2 — Yes Details →
v0.0.0-20170921013920-77cc7ed9d87e 21 Sep 2017 C1 U2 — Yes Details →
v0.0.0-20170522185815-0e17f418f2a0 22 May 2017 C1 U2 — Yes Details →
v0.0.0-20170511202703-52bf85a762eb 11 May 2017 C1 U2 — Yes Details →
v0.0.0-20170320142038-99eb6f0736db 20 Mar 2017 C1 U2 — Yes Details →
v0.0.0-20170320141032-c14e40882d84 20 Mar 2017 C1 U2 — Yes Details →
v0.0.0-20170320133631-5443e2d527fa 20 Mar 2017 C1 U2 — Yes Details →
v0.0.0-20170320132913-8d3472bf2d00 20 Mar 2017 C1 U2 — Yes Details →
v0.0.0-20170104034614-56f86e280825 04 Jan 2017 C1 U2 — Yes Details →
v0.0.0-20161224070552-94cf7738be0a 24 Dec 2016 C1 U2 — Yes Details →
v0.0.0-20161026184852-9db8a81ca2c0 26 Oct 2016 C1 U2 — Yes Details →
v0.0.0-20161026184554-37437adc68b7 26 Oct 2016 C1 U2 — Yes Details →

The newest 120 of 187 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2023 3

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 3 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/square/squalor

The 3 most severe of 3 vulnerabilities recorded for this package

Search all 3 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2020-36645: Squalor SQL Injection vulnerability 9.8 critical 0.0.0 07 Jan 2023
CVE-2020-36645: Squalor SQL Injection vulnerability N/A unrated 0.0.0-20200306154055-f6f0a47cc344 01 Feb 2023
CVE-2020-36645: SQL Injection in github.com/square/squalor N/A unrated 0.0.0-20200306154055-f6f0a47cc344 01 Feb 2023

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/square/squalor

Is github.com/square/squalor safe to use?

Vulert records 3 vulnerabilities for github.com/square/squalor in Go: 1 critical, 0 high, 0 medium and 0 low, plus 2 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/square/squalor's Vulert package health score?

Vulert scores github.com/square/squalor 56/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/square/squalor affected?

Yes. v0.0.0-20220330195509-e62ea2a4f703, the version you would install today, has 3 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/square/squalor should I use?

v0.0.0-20220330195509-e62ea2a4f703 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/square/squalor have?

3 vulnerabilities are recorded for github.com/square/squalor in the Go ecosystem: 1 critical, 0 high, 0 medium and 0 low, plus 2 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/square/squalor vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/square/squalor in the last 12 months, and the oldest entry in this database dates to 07 Jan 2023. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/square/squalor are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/square/squalor for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/square/squalor version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.