VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/Xhofe/alist: vulnerability history, versions and safety

github.com/Xhofe/alist is a package in the Go ecosystem. Vulert records 1 vulnerability for it across 0 release, first recorded in Mar 2022. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
1 vulnerabilities recorded M1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/Xhofe/alist vulnerabilities

Vulert verdict on github.com/Xhofe/alist v1.0.6 i

Updated on 22 Oct 2026

Every vulnerability Vulert records for this package has a fix, and the newest was recorded 13 Mar 2022. Apply the fixes listed below and you are clear.

Package health score 76/100
  • Security Minor issues
  • Maintenance Slowing
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Move the affected dependencies to the fixed versions listed below, then keep the package monitored so the next vulnerability reaches you. Fix it, then keep watch: Vulert alerts you when a new vulnerability affects the version you run. Monitor it with Vulert →

  • Current release v1.0.6 — unaffected i
  • Vulnerabilities on record 1 over 1 year · 0 in the last year i
  • Latest disclosure 13 Mar 2022 i
  • Highest CVSS 6.1 i
  • With no published fix 0 i
  • Stars 50,309 i
  • OpenSSF scorecard 4/10 i
  • Last release 50 months ago i
  • Licence AGPL-3.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/Xhofe/alist, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20220814073822-bd52df192667 14 Aug 2022 none AGPL-3.0 — Details →
v0.0.0-20220813125619-ba9d568539fe 13 Aug 2022 none AGPL-3.0 — Details →
v0.0.0-20220813035214-a66b2d92b7f9 13 Aug 2022 none AGPL-3.0 — Details →
v0.0.0-20220813032840-0b3c5f3e2b4c 13 Aug 2022 none AGPL-3.0 — Details →
v0.0.0-20220813032550-cc74effd3012 13 Aug 2022 none AGPL-3.0 — Details →
v0.0.0-20220806084739-51b8b4380d8b 06 Aug 2022 none AGPL-3.0 — Details →
v0.0.0-20220728105305-5e59b0a697e3 28 Jul 2022 none AGPL-3.0 — Details →
v0.0.0-20220722054012-1d3b86985f32 22 Jul 2022 none AGPL-3.0 — Details →
v0.0.0-20220722053925-c711ba53a3bd 22 Jul 2022 none AGPL-3.0 — Details →
v0.0.0-20220721142624-532a326ad694 21 Jul 2022 none AGPL-3.0 — Details →
v0.0.0-20220721140811-917ad07ab747 21 Jul 2022 none AGPL-3.0 — Details →
v0.0.0-20220721130849-50fd7de0457c 21 Jul 2022 none AGPL-3.0 — Details →
v0.0.0-20220721125043-f6527f1c4c6b 21 Jul 2022 none AGPL-3.0 — Details →
v0.0.0-20220717155927-a3ef3d1416ed 17 Jul 2022 none AGPL-3.0 — Details →
v0.0.0-20220714142551-89b05021f8b2 14 Jul 2022 none AGPL-3.0 — Details →
v0.0.0-20220714142247-7e40acad3fbb 14 Jul 2022 none AGPL-3.0 — Details →
v0.0.0-20220606082212-eb15bce24b2b 06 Jun 2022 none AGPL-3.0 — Details →
v0.0.0-20220606081611-52814266b8c6 06 Jun 2022 none AGPL-3.0 — Details →
v0.0.0-20220606081550-f845ec05e0da 06 Jun 2022 none AGPL-3.0 — Details →
v0.0.0-20220606081549-29fb02c886de 06 Jun 2022 none AGPL-3.0 — Details →
v0.0.0-20220606081035-072e854a7196 06 Jun 2022 none AGPL-3.0 — Details →
v0.0.0-20220603135742-cae0a5f60335 03 Jun 2022 none AGPL-3.0 — Details →
v0.0.0-20220602101317-7c6d8ca2229e 02 Jun 2022 none AGPL-3.0 — Details →
v0.0.0-20220531080354-f6be50f15a5b 31 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220528130147-c35d54d0921e 28 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220528130104-323dad2a1c4f 28 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220528124313-62aefc4f6826 28 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220521141218-6a7eb8b3ebca 21 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220519073147-eb549f2631fc 19 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220519073140-9207eb69ee47 19 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220517044922-866df0540b07 17 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220516153312-04e04a1aa612 16 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220516130300-6a66e39d5bd9 16 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220516014833-f2b2728be71e 16 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220515081752-39b8f28fc498 15 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220513093926-e1ccc0b21579 13 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220513093822-87e339850d76 13 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220512142732-aeb2297f1f24 12 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220512133955-3b59bb5c090e 12 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220512124249-bc4bac921f6d 12 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220512111828-f917882a84e2 12 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220512111539-6a67d1cf6970 12 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220512052749-041b3587bf35 12 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220512052612-0eef7a129c32 12 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220511120115-4b635f06e32a 11 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220510143559-279111a8e213 10 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220510135444-67674835da5f 10 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220510134043-732e9eb1c306 10 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220510133748-b6af9aa587a6 10 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220510123519-a9027c0f06bd 10 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220510101806-d780fa18a506 10 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220510101632-d5626d6e2feb 10 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220509101452-52dcbfe1a4bf 09 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220509044351-bf0ee3d31501 09 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220508063001-0237e78c1e82 08 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220508062826-44b8c6abf755 08 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220508062627-33e1acd34491 08 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220508062537-c54cb61f14c6 08 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220508062207-734b20470918 08 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220508055958-b7d9c5e4ffff 08 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220508053756-e698b457b9fa 08 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220508053636-5258c2165632 08 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220507084722-1ca9a3d14ec2 07 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220507084302-f23bec9a3541 07 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220507083833-62a1acd1f454 07 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220507083810-fa6e3fe5678c 07 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220507083809-b71b62ee35fb 07 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220507083724-410b4939a407 07 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220507083658-62c0071f2959 07 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220507083657-f043a4100569 07 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220507083617-2e9da57036c4 07 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220507083550-d83cd37984e1 07 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220507083549-bad8b0ebbbb7 07 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220507082910-4535e659482e 07 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220501111329-3b413c2ee2b6 01 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220501052554-427ae5633387 01 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220501014225-658fd5ad6e8a 01 May 2022 none AGPL-3.0 — Details →
v0.0.0-20220430134115-11830bb51c0c 30 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220429060951-75c98429bf95 29 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220429060804-f77ea1b3a585 29 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220428154422-0a8bd96d332a 28 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220428151537-68f37fc11fab 28 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220428131711-d6775cda697c 28 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220428100507-43c6e07bacc7 28 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220426072239-4901e9080c26 26 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220425080549-48049a5ea375 25 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220424132224-bd7260f0ffd6 24 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220424094026-6c0d54394fe0 24 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220424093925-ce5dacbf3f12 24 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220424085347-08aaa5e2c089 24 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220424073817-42c0e438d592 24 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220424073759-e4df14604355 24 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220423144302-27b7dae113d0 23 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220423085326-293d574ce767 23 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220421143412-56b3b35556db 21 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220421143117-a7a0e85a465b 21 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220420072148-95c0106fdd2b 20 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220420071630-6612338fc155 20 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220418103229-c276a1541f53 18 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220418103110-cc96a5bbdbd0 18 Apr 2022 none AGPL-3.0 — Details →
v0.0.0-20220418102921-0810561a8a59 18 Apr 2022 none — — Details →
v0.0.0-20220417151202-82a5c43b9435 17 Apr 2022 none — — Details →
v0.0.0-20220417145054-d38f36ef4445 17 Apr 2022 none — — Details →
v0.0.0-20220417145028-f9533440c760 17 Apr 2022 none — — Details →
v0.0.0-20220417131255-41a186b05175 17 Apr 2022 none — — Details →
v0.0.0-20220417092902-4e6a44253c24 17 Apr 2022 none — — Details →
v0.0.0-20220417091639-ebda77cd43c3 17 Apr 2022 none — — Details →
v0.0.0-20220416130633-1a1e86521f1d 16 Apr 2022 none — — Details →
v0.0.0-20220416092816-1b4740dae3af 16 Apr 2022 none — — Details →
v0.0.0-20220416090848-91fc8df84e61 16 Apr 2022 none — — Details →
v0.0.0-20220416090821-e6ecf1fa3086 16 Apr 2022 none — — Details →
v0.0.0-20220416085555-183a6f1b3a71 16 Apr 2022 none — — Details →
v0.0.0-20220416084321-3c2d59e272c1 16 Apr 2022 none — — Details →
v0.0.0-20220416072321-fd80e3eaf783 16 Apr 2022 none — — Details →
v0.0.0-20220416070428-4928c331a888 16 Apr 2022 none — — Details →
v0.0.0-20220416065236-3ad75e54cb75 16 Apr 2022 none — — Details →
v0.0.0-20220414141615-a2cf3ab42eba 14 Apr 2022 none — — Details →
v0.0.0-20220413135759-e24814ee2fed 13 Apr 2022 none — — Details →
v0.0.0-20220412122209-37b42e6e17fb 12 Apr 2022 none — — Details →
v0.0.0-20220412015422-30ebb0f4d406 12 Apr 2022 none — — Details →

The newest 120 of 553 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 1 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/Xhofe/alist

The 1 most severe of 1 vulnerabilities recorded for this package

Search all 1 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2022-26533: Cross-site Scripting in Alist 6.1 medium 2.1.1 13 Mar 2022

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 22/Oct/2026 · Vulnerabilities in our DB: 524173

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/Xhofe/alist

Is github.com/Xhofe/alist safe to use?

Vulert records 1 vulnerabilities for github.com/Xhofe/alist in Go: 0 critical, 0 high, 1 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/Xhofe/alist's Vulert package health score?

Vulert scores github.com/Xhofe/alist 76/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Which version of github.com/Xhofe/alist should I use?

v1.0.6 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/Xhofe/alist have?

1 vulnerability is recorded for github.com/Xhofe/alist in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/Xhofe/alist vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/Xhofe/alist in the last 12 months, and the oldest entry in this database dates to 13 Mar 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/Xhofe/alist are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/Xhofe/alist for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/Xhofe/alist version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.