Vulnerability Database · Go · Package report

github.com/theupdateframework/notary: vulnerability history, versions and safety

github.com/theupdateframework/notary is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

Vulert verdict on github.com/theupdateframework/notary v0.7.0 i

Updated on 23 Oct 2026

Good news: v0.7.0, the version you would install today, has no known vulnerabilities.

Package health score 65/100
  • Security Minor issues
  • Maintenance Unmaintained
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Stay on v0.7.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.7.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v0.7.0 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 3,290 i
  • OpenSSF scorecard 4/10 i
  • Last release 69 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/theupdateframework/notary, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20240416001237-9d2b3b359293 16 Apr 2024 none Apache-2.0 — Details →
v0.7.1-0.20240416001237-9d2b3b359293 16 Apr 2024 none Apache-2.0 — Details →
v0.7.1-0.20240111212319-38c802d61e52 11 Jan 2024 none Apache-2.0 — Details →
v0.7.1-0.20231205180521-a9cfc88ce5b9 05 Dec 2023 none Apache-2.0 — Details →
v0.7.1-0.20230725035533-c655a2fb4861 25 Jul 2023 none Apache-2.0 — Details →
v0.7.1-0.20230719173046-069eda7f8342 19 Jul 2023 none Apache-2.0 — Details →
v0.7.1-0.20230623005313-faeb70b09742 23 Jun 2023 none Apache-2.0 — Details →
v0.0.0-20221031134025-887a007da884 31 Oct 2022 none Apache-2.0 — Details →
v0.3.1-0.20221031134025-887a007da884 31 Oct 2022 none Apache-2.0 — Details →
v0.7.1-0.20221031134025-887a007da884 31 Oct 2022 none Apache-2.0 — Details →
v0.7.1-0.20221011115416-74ee191c2147 11 Oct 2022 none Apache-2.0 — Details →
v0.7.1-0.20221011112905-8417915c6d1a 11 Oct 2022 none Apache-2.0 — Details →
v0.0.0-20220609130607-40969cc32137 09 Jun 2022 none Apache-2.0 — Details →
v0.7.1-0.20220609130607-40969cc32137 09 Jun 2022 none Apache-2.0 — Details →
v0.7.1-0.20220607131233-4373c5382393 07 Jun 2022 none Apache-2.0 — Details →
v0.0.0-20220531111922-3a154c02f990 31 May 2022 none Apache-2.0 — Details →
v0.7.1-0.20220531111922-3a154c02f990 31 May 2022 none Apache-2.0 — Details →
v0.0.0-20220523133615-0154426cb243 23 May 2022 none Apache-2.0 — Details →
v0.7.1-0.20220523133615-0154426cb243 23 May 2022 none Apache-2.0 — Details →
v0.7.1-0.20220516170330-efc35b026986 16 May 2022 none Apache-2.0 — Details →
v0.7.1-0.20220512162919-3d03977f7820 12 May 2022 none Apache-2.0 — Details →
v0.7.1-0.20220512162907-8fa7c9dc16b8 12 May 2022 none Apache-2.0 — Details →
v0.7.1-0.20220512111728-d7305613db88 12 May 2022 none Apache-2.0 — Details →
v0.7.1-0.20220509155741-b836bd2ef1f1 09 May 2022 none Apache-2.0 — Details →
v0.7.1-0.20220315181813-681322479950 15 Mar 2022 none Apache-2.0 — Details →
v0.7.1-0.20211019155316-ca095023296d 19 Oct 2021 none Apache-2.0 — Details →
v0.0.0-20210823175702-1062e481efc6 23 Aug 2021 none Apache-2.0 — Details →
v0.7.1-0.20210823175702-1062e481efc6 23 Aug 2021 none Apache-2.0 — Details →
v0.7.1-0.20210822155431-30f6ae3516c9 22 Aug 2021 none Apache-2.0 — Details →
v0.0.0-20210805090225-95f8189a020a 05 Aug 2021 none Apache-2.0 — Details →
v0.6.2-0.20210805090225-95f8189a020a 05 Aug 2021 none Apache-2.0 — Details →
v0.7.1-0.20210805090225-95f8189a020a 05 Aug 2021 none Apache-2.0 — Details →
v0.7.1-0.20210805073306-3c880aa64adc 05 Aug 2021 none Apache-2.0 — Details →
v0.0.0-20210706104947-177297005ef8 06 Jul 2021 none Apache-2.0 — Details →
v0.7.1-0.20210706104947-177297005ef8 06 Jul 2021 none Apache-2.0 — Details →
v0.7.1-0.20210519202850-a3132057d6c6 19 May 2021 none Apache-2.0 — Details →
v0.7.1-0.20210430120815-25cc88769525 30 Apr 2021 none Apache-2.0 — Details →
v0.7.1-0.20210428094927-15a874993745 28 Apr 2021 none Apache-2.0 — Details →
v0.7.1-0.20210402131124-3c0380a766cd 02 Apr 2021 none Apache-2.0 — Details →
v0.0.0-20210315103452-bf96a202a09a 15 Mar 2021 none Apache-2.0 — Details →
v0.7.1-0.20210315103452-bf96a202a09a 15 Mar 2021 none Apache-2.0 — Details →
v0.0.0-20210302171042-5f1f4a34f4cf 02 Mar 2021 none Apache-2.0 — Details →
v0.7.1-0.20210302171042-5f1f4a34f4cf 02 Mar 2021 none Apache-2.0 — Details →
v0.0.0-20210126092334-1035d0e3b463 26 Jan 2021 none Apache-2.0 — Details →
v0.7.1-0.20210126092334-1035d0e3b463 26 Jan 2021 none Apache-2.0 — Details →
v0.7.1-0.20210126013727-9432c7ae0605 26 Jan 2021 none Apache-2.0 — Details →
v0.7.1-0.20210125102231-201c44e74c3f 25 Jan 2021 none Apache-2.0 — Details →
v0.7.1-0.20210122081454-01328d9792c9 22 Jan 2021 none Apache-2.0 — Details →
v0.7.1-0.20210121145620-b253f41ab695 21 Jan 2021 none Apache-2.0 — Details →
v0.5.2-0.20210114133957-b0b6bfdd4933 14 Jan 2021 none Apache-2.0 — Details →
v0.7.0 14 Jan 2021 none Apache-2.0 — Details →
v0.6.2-0.20201230161722-b16ce9223323 30 Dec 2020 none Apache-2.0 — Details →
v0.6.2-0.20201123220902-32c98b3b3b0d 23 Nov 2020 none Apache-2.0 — Details →
v0.6.2-0.20200806012645-20ad3ae1a886 06 Aug 2020 none Apache-2.0 — Details →
v0.0.0-20200804143915-84287fd8df4f 04 Aug 2020 none Apache-2.0 — Details →
v0.6.2-0.20200804143915-84287fd8df4f 04 Aug 2020 none Apache-2.0 — Details →
v0.6.2-0.20200604104540-c312d8211cfb 04 Jun 2020 none Apache-2.0 — Details →
v0.6.2-0.20200407144526-76f72252a452 07 Apr 2020 none Apache-2.0 — Details →
v0.0.0-20200406090937-dc18d79970fc 06 Apr 2020 none Apache-2.0 — Details →
v0.6.2-0.20200406090937-dc18d79970fc 06 Apr 2020 none Apache-2.0 — Details →
v0.6.2-0.20200402100633-7585b5de2a05 02 Apr 2020 none Apache-2.0 — Details →
v0.6.2-0.20200318005404-c8a9108574ee 18 Mar 2020 none Apache-2.0 — Details →
v0.6.2-0.20200317134637-4729376cf9ab 17 Mar 2020 none Apache-2.0 — Details →
v0.6.2-0.20200317134513-600b1ee24239 17 Mar 2020 none Apache-2.0 — Details →
v0.6.2-0.20200311235525-f4b5918a0772 11 Mar 2020 none Apache-2.0 — Details →
v0.6.2-0.20200114084303-f255ae779066 14 Jan 2020 none Apache-2.0 — Details →
v0.6.2-0.20200107030026-48b3e3445928 07 Jan 2020 none Apache-2.0 — Details →
v0.0.0-20191110104823-83d5a312e75f 10 Nov 2019 none Apache-2.0 — Details →
v0.6.2-0.20191110104823-83d5a312e75f 10 Nov 2019 none Apache-2.0 — Details →
v0.6.2-0.20191108125829-006963f1ded5 08 Nov 2019 none Apache-2.0 — Details →
v0.6.2-0.20191006004832-62258bc0beb3 06 Oct 2019 none Apache-2.0 — Details →
v0.6.2-0.20190912095748-effff7596032 12 Sep 2019 none Apache-2.0 — Details →
v0.6.2-0.20190816124903-59fd8aea02a7 16 Aug 2019 none Apache-2.0 — Details →
v0.6.2-0.20190810092422-f7ad44b6998b 10 Aug 2019 none Apache-2.0 — Details →
v0.6.2-0.20190730091427-57bc074432ae 30 Jul 2019 none Apache-2.0 — Details →
v0.6.2-0.20190729025132-3f2951a526ca 29 Jul 2019 none Apache-2.0 — Details →
v0.6.2-0.20190719052824-12f2d08fe045 19 Jul 2019 none Apache-2.0 — Details →
v0.6.2-0.20190607084649-e3e40aa04b50 07 Jun 2019 none Apache-2.0 — Details →
v0.0.0-20190524024310-a09c05a6a746 24 May 2019 none Apache-2.0 — Details →
v0.6.2-0.20190524024310-a09c05a6a746 24 May 2019 none Apache-2.0 — Details →
v0.6.2-0.20190523033654-f22b5b1bd82d 23 May 2019 none Apache-2.0 — Details →
v0.0.0-20190314000213-8ff3ca06ec48 14 Mar 2019 none Apache-2.0 — Details →
v0.6.2-0.20190314000213-8ff3ca06ec48 14 Mar 2019 none Apache-2.0 — Details →
v0.6.2-0.20190306000612-7e330fa39b5d 06 Mar 2019 none Apache-2.0 — Details →
v0.6.2-0.20190225164144-e9412a4cd33d 25 Feb 2019 none Apache-2.0 — Details →
v0.6.2-0.20190219213550-168c38249dd7 19 Feb 2019 none Apache-2.0 — Details →
v0.6.2-0.20190206131343-7c033c23e1ff 06 Feb 2019 none Apache-2.0 — Details →
v0.6.2-0.20190124150214-ad4b39e6613d 24 Jan 2019 none Apache-2.0 — Details →
v0.0.0-20181016165936-6e8cc6e54bb1 16 Oct 2018 none Apache-2.0 — Details →
v0.6.2-0.20181015150641-b753ebb05c5b 15 Oct 2018 none Apache-2.0 — Details →
v0.6.2-0.20180829215654-c6360bf1e062 29 Aug 2018 none Apache-2.0 — Details →
v0.6.2-0.20180814124207-373a225c9959 14 Aug 2018 none Apache-2.0 — Details →
v0.0.0-20180810165139-1fa103e3340a 10 Aug 2018 none Apache-2.0 — Details →
v0.6.2-0.20180802181513-ecb791c66388 02 Aug 2018 none Apache-2.0 — Details →
v0.6.2-0.20180711031329-8766263955b5 11 Jul 2018 none Apache-2.0 — Details →
v0.6.2-0.20180710143126-3c6153e5b8e6 10 Jul 2018 none Apache-2.0 — Details →
v0.6.2-0.20180614180255-650884a26381 14 Jun 2018 none Apache-2.0 — Details →
v0.6.2-0.20180611211645-de0f3e6fc688 11 Jun 2018 none Apache-2.0 — Details →
v0.6.2-0.20180516123614-665e8ef16408 16 May 2018 none Apache-2.0 — Details →
v0.0.0-20180424212018-2b39e81caa26 24 Apr 2018 none Apache-2.0 — Details →
v0.6.2-0.20180424212018-2b39e81caa26 24 Apr 2018 none — — Details →
v0.6.2-0.20180417170251-1cd76bb06ec7 17 Apr 2018 none — — Details →
v0.6.2-0.20180416083904-d4f8e4a98e77 16 Apr 2018 none — — Details →
v0.6.2-0.20180411043649-8bbfdd28f435 11 Apr 2018 none — — Details →
v0.0.0-20180410181106-d6e1431feb32 10 Apr 2018 none — — Details →
v0.6.1 10 Apr 2018 none — — Details →
v0.5.2-0.20180407102518-20a1f243b161 07 Apr 2018 none — — Details →
v0.5.2-0.20180322172656-4d660a747101 22 Mar 2018 none — — Details →
v0.5.2-0.20180304202358-53c05e2d8826 04 Mar 2018 none — — Details →
v0.6.0 28 Feb 2018 none — — Details →
v0.5.2-0.20180222193857-734d552acace 22 Feb 2018 none — — Details →
v0.0.0-20180209053558-6008ff6c2657 09 Feb 2018 none — — Details →
v0.5.2-0.20180209053558-6008ff6c2657 09 Feb 2018 none — — Details →
v0.0.0-20180129185925-f234167994cf 29 Jan 2018 none — — Details →
v0.5.1-0.20180129185925-f234167994cf 29 Jan 2018 none — — Details →
v0.5.2-0.20180129185925-f234167994cf 29 Jan 2018 none — — Details →
v0.5.2-0.20180125001155-6d8873e92e94 25 Jan 2018 none — — Details →
v0.5.2-0.20171120211650-a41821feaf59 20 Nov 2017 none — — Details →
v0.5.2-0.20171114193426-a1d4c06498a5 14 Nov 2017 none — — Details →
v0.5.2-0.20171102090035-86888f17c3fe 02 Nov 2017 none — — Details →

The newest 120 of 186 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/theupdateframework/notary

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/theupdateframework/notary

Is github.com/theupdateframework/notary safe to use?

Vulert has no vulnerabilities on record for github.com/theupdateframework/notary in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/theupdateframework/notary's Vulert package health score?

Vulert scores github.com/theupdateframework/notary 65/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/theupdateframework/notary affected?

No. v0.7.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of github.com/theupdateframework/notary should I use?

v0.7.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/theupdateframework/notary have?

0 vulnerabilities are recorded for github.com/theupdateframework/notary in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/theupdateframework/notary vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/theupdateframework/notary in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/theupdateframework/notary are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/theupdateframework/notary for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/theupdateframework/notary version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.