VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/traPtitech/traQ: vulnerability history, versions and safety

github.com/traPtitech/traQ is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, first recorded in Aug 2025. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded M1 U1
i
1 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/traPtitech/traQ vulnerabilities

Vulert verdict on github.com/traPtitech/traQ v1.0.0-rc.2 i

Updated on 23 Oct 2026

Careful: v1.0.0-rc.2 has 2 known vulnerabilities, and 1 has no fix yet. Use an earlier safe version, or the workaround listed for each one.

Package health score 60/100
  • Security Minor issues
  • Maintenance Slowing
  • Popularity Niche
  • Community Quiet

The current release has a vulnerability with no published fix, which caps this score.

What to do: Pin an earlier, unaffected release if you can, and apply the workaround each vulnerability lists until a fix is published. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v1.0.0-rc.2 — affected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 29 Aug 2025 i
  • Highest CVSS 5.9 i
  • With no published fix 1 i
  • Stars 476 i
  • OpenSSF scorecard 5/10 i
  • Last release 91 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/traPtitech/traQ, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.0.0-rc.2.0.20261022002517-2f9f61c9ca10 22 Oct 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20261019124629-46352d51a2f8 19 Oct 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20261017223216-e8737cd95890 17 Oct 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20261011000840-94a1a42472a6 11 Oct 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20261010001950-8835cef347a7 10 Oct 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20261009120645-8d6b08c3c833 09 Oct 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20261006233320-07910a0def59 06 Oct 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20261005112904-23e1da462f6a 05 Oct 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20261004234235-85106ce5fde3 04 Oct 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20261001235700-3302c2c26551 01 Oct 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260930001612-770a600789d9 30 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260929003722-f67ef3b2b974 29 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260926223959-5cbf906bfb08 26 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260923225432-6bb666319ca8 23 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260921231721-a397fea70c09 21 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260920143851-b08db60b2396 20 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260920122238-aadbdb26fbe0 20 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260919221543-309d05f15cf0 19 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260918222757-43b3ab99d480 18 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260918093007-cfdbe3461146 18 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260915231043-0c5ce255c593 15 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260915084612-0d421dfee6fe 15 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260914042024-0aee1d97212c 14 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260910223008-9c9b778430d1 10 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260907224612-5f9bb5e2b311 07 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260905215040-1e3c0715c196 05 Sep 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260825203310-3805e945058e 25 Aug 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260821201651-ac297a77b09e 21 Aug 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260812204403-baaf5d76db60 12 Aug 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260811212433-b77f978dd895 11 Aug 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260729211250-917b98add240 29 Jul 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260728215723-3f74970c9dbe 28 Jul 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260711205845-305ee051f3a7 11 Jul 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260709141034-eaa9c2ca0a17 09 Jul 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260702071839-5512ece74b19 02 Jul 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260701072602-a3f94bcef932 01 Jul 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260527225904-aec46b2b853f 27 May 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20260130084957-19be7dec8077 30 Jan 2026 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251130022818-6dba1dbd9301 30 Nov 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251113201714-ba9b7785e783 13 Nov 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251112201601-31e9bffe47f9 12 Nov 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251111204031-ef9f9baf1b67 11 Nov 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251111100401-fd56366f55c0 11 Nov 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251110203740-38a4de30c2b0 10 Nov 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251109201325-97b6701ccca7 09 Nov 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251107201407-e90752aacb01 07 Nov 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251102202339-f9e082bff484 02 Nov 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251101201314-504e6560b003 01 Nov 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251029201512-2a8ca748984e 29 Oct 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251028203857-9519d586adae 28 Oct 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251024201435-12fc700458e8 24 Oct 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251022204852-12ee9b156f9c 22 Oct 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251018202252-6cc5b580959a 18 Oct 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251016203623-4883920c03d0 16 Oct 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251009201523-a06f79fac188 09 Oct 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20251003201411-a04b3c612492 03 Oct 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250930201438-bd1c223ad973 30 Sep 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250929203526-06d5ecc8095c 29 Sep 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250923202500-246510060808 23 Sep 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250920201227-b4fb0c4e14af 20 Sep 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250916201422-7d09e0752410 16 Sep 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250914201246-aa9eb592616f 14 Sep 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250913100330-70e8ec2a30a5 13 Sep 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250911202208-877cc8a73ba5 11 Sep 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250909203400-455198a8a3e6 09 Sep 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250825143010-ce5da94f5d5a 25 Aug 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250824201422-2b19d5c4717a 24 Aug 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250625111845-2de8793fe860 25 Jun 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250609213612-8af68d2fc1e6 09 Jun 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250523201501-02163018a576 23 May 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20250327202145-d608c962593f 27 Mar 2025 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20241209201521-9afb7d873738 09 Dec 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20241205202402-e52b1baa13a5 05 Dec 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20241204211322-f898b8ff64c1 04 Dec 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20241130201212-033a36d519eb 30 Nov 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20241128201323-696e547cf769 28 Nov 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20241125201358-868e4e278339 25 Nov 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20241123201832-9cad5163b303 23 Nov 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20241122202042-995db0517bb1 22 Nov 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20241121202018-bf2a8e0d64f0 21 Nov 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20241120204114-965bb0b2e7a8 20 Nov 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20241117034013-7b11184143dc 17 Nov 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20241109201123-3ab90d3b1433 09 Nov 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20241102205722-c9d1d1b06c61 02 Nov 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240911201611-e1e1ee2c0845 11 Sep 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240910201243-13ea70aed7cd 10 Sep 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240905204218-ebdde541772e 05 Sep 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240706202654-441762e1fb36 06 Jul 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240627234601-4915ff4713ad 27 Jun 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240619201029-4ac16404c3a1 19 Jun 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240525201725-048c1b722b0b 25 May 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240517201831-efcd171bde83 17 May 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240316201528-226ec6dff351 16 Mar 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240314201740-2cf9c79b0b70 14 Mar 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240305202733-ce77c62b5318 05 Mar 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240304202137-636186c42fae 04 Mar 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240227201739-4c1741ff44c4 27 Feb 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240222202201-66a947c26a2e 22 Feb 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240220202041-e2506cb1725b 20 Feb 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240208034523-61c18d38ac2c 08 Feb 2024 M1 U1 MIT No Details →
v1.0.0-rc.2.0.20240202211911-34e8871c1b43 02 Feb 2024 M1 U1 — No Details →
v1.0.0-rc.2.0.20240131201637-a5cd44750273 31 Jan 2024 M1 U1 — No Details →
v1.0.0-rc.2.0.20230816070804-4523aee8ca8c 16 Aug 2023 M1 U1 — No Details →
v1.0.0-rc.2.0.20230303043432-20d0f5a12149 03 Mar 2023 M1 U1 — No Details →
v1.0.0-rc.2.0.20230120101819-b9818ce53aa7 20 Jan 2023 M1 U1 — No Details →
v1.0.0-rc.2.0.20230113021425-50c03be0abcc 13 Jan 2023 M1 U1 — No Details →
v1.0.0-rc.2.0.20230106052251-48f487bde055 06 Jan 2023 M1 U1 — No Details →
v1.0.0-rc.2.0.20230105021339-3f1dd2a7f3e8 05 Jan 2023 M1 U1 — No Details →
v1.0.0-rc.2.0.20220624032913-7168c54b1e3a 24 Jun 2022 M1 U1 — No Details →
v1.0.0-rc.2.0.20220623063407-0dec1433772d 23 Jun 2022 M1 U1 — No Details →
v1.0.0-rc.2.0.20220622090211-dd3326b5426c 22 Jun 2022 M1 U1 — No Details →
v1.0.0-rc.2.0.20220621055852-801853e7b988 21 Jun 2022 M1 U1 — No Details →
v1.0.0-rc.2.0.20220615083249-638eaffd6eaf 15 Jun 2022 M1 U1 — No Details →
v1.0.0-rc.2.0.20220613170907-cb9ec6a2d828 13 Jun 2022 M1 U1 — No Details →
v1.0.0-rc.2.0.20220608050016-65b406eb50e6 08 Jun 2022 M1 U1 — No Details →
v1.0.0-rc.2.0.20220607031523-808bb7da86b4 07 Jun 2022 M1 U1 — No Details →
v1.0.0-rc.2.0.20220602131438-81d10d5c152d 02 Jun 2022 M1 U1 — No Details →
v1.0.0-rc.2.0.20220530032159-b961ecbe4238 30 May 2022 M1 U1 — No Details →
v1.0.0-rc.2.0.20220527031322-e02535f79385 27 May 2022 M1 U1 — No Details →
v1.0.0-rc.2.0.20220521174313-abcd2c583356 21 May 2022 M1 U1 — No Details →

The newest 120 of 236 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2025 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/traPtitech/traQ

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2025-57813: traQ Vulnerability Allows Sensitive Information Leakage in Log Files 5.9 medium 3.25.0 26 Aug 2025
CVE-2025-57813: Sensitive Information Insertion Vulnerability in traQ Package N/A unrated No fix published 29 Aug 2025

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/traPtitech/traQ

Is github.com/traPtitech/traQ safe to use?

Vulert records 2 vulnerabilities for github.com/traPtitech/traQ in Go: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. 1 of them has no published fix yet, so that is the one to avoid or mitigate.

What is github.com/traPtitech/traQ's Vulert package health score?

Vulert scores github.com/traPtitech/traQ 60/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15). The current release has a vulnerability with no published fix, which caps this score.

Is the latest version of github.com/traPtitech/traQ affected?

Yes. v1.0.0-rc.2, the version you would install today, has 2 known vulnerabilities, and 1 has no published fix yet. Use an earlier unaffected release, or the workaround each vulnerability lists.

Which version of github.com/traPtitech/traQ should I use?

v1.0.0-rc.2 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/traPtitech/traQ have?

2 vulnerabilities are recorded for github.com/traPtitech/traQ in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/traPtitech/traQ vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/traPtitech/traQ in the last 12 months, and the oldest entry in this database dates to 26 Aug 2025. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/traPtitech/traQ are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/traPtitech/traQ for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/traPtitech/traQ version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.