VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/yaklang/yaklang: vulnerability history, versions and safety

github.com/yaklang/yaklang is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from Aug 2023 to Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded H1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/yaklang/yaklang vulnerabilities

Vulert verdict on github.com/yaklang/yaklang v1.3.3 i

Updated on 23 Oct 2026

Every vulnerability Vulert records for this package has a fix, and the newest was recorded 21 Aug 2024. Apply the fixes listed below and you are clear.

Package health score 77/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Widely used
  • Community Quiet

What to do: Move the affected dependencies to the fixed versions listed below, then keep the package monitored so the next vulnerability reaches you. Fix it, then keep watch: Vulert alerts you when a new vulnerability affects the version you run. Monitor it with Vulert →

  • Current release v1.3.3 — unaffected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 21 Aug 2024 i
  • Highest CVSS 7.5 i
  • With no published fix 0 i
  • Stars 643 i
  • OpenSSF scorecard 4/10 i
  • Last release this month i
  • Licence AGPL-3.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/yaklang/yaklang, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.4.9-beta4.0.20261023122205-c2cfead94354 23 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta4.0.20261023120559-663ee25c8b8b 23 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta4 23 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261023035526-75afc6164b21 23 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261022163835-8a71051756ac 22 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-alpha1022 22 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261022100723-f2c7edb5f2b8 22 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261020151109-0971cec23d29 20 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261020113749-dbbe0d7999dd 20 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261020082104-63525a597f32 20 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261020032209-140fa4dce2f2 20 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261020030038-9eacef665abc 20 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261019081735-4b234b094119 19 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261019031021-80924dc02400 19 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261019004654-d8c3d14031ad 19 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261017161218-405efd678730 17 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261017093154-28da6eda4c59 17 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3.0.20261017021718-1d2344d56696 17 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta3 16 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta2.0.20261015095452-b81179b8b2c0 15 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-beta2.0.20261015032007-d2167660b53f 15 Oct 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-alpha0915 15 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260914100232-14f4a0ffd0b9 14 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260914100232-14f4a0ffd0b9 14 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260914072816-70ffaebea632 14 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260911093949-dac31e13a332 11 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta18 11 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260911071811-62aa635d10d2 11 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260911041121-05283970b880 11 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-alpha0911 11 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-alpha0911ipc 10 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-alpha0910ipc 10 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260910101442-667526d49625 10 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-alpha0910a 08 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260908091154-a2042ce03c16 08 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260908053510-5b8c0ae303b8 08 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260908032915-65467f3cf73d 08 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-alpha0908 08 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta17 04 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260904081127-7e4bcdad662b 04 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta16 04 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260904074723-25b325a30457 04 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260904071220-d43ebbe926d2 04 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260904065131-826a3bdc2cc9 04 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260904064410-2e35ad54ecbe 04 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260904062239-592eeabc2930 04 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260904002012-af872ecff738 04 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260903092948-710f0e69db80 03 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260903092948-710f0e69db80 03 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260903090517-35367a1b9217 03 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260903081211-ccb7f7414b56 03 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260903025038-e3afa43108e0 03 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260902090047-e478a4cbe64c 02 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260902090047-e478a4cbe64c 02 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260902072821-0db9e66fbdfc 02 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-alpha0902 02 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.9-alpha0928a 02 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260902024148-def90697a358 02 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260901091145-cb783af78378 01 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260901091145-cb783af78378 01 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260901081240-dcf5015611fc 01 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260901081240-dcf5015611fc 01 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260901073956-7837cc485bf3 01 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260901070805-ed0dd8c5e235 01 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260901052653-78c3476af6fb 01 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260901052653-78c3476af6fb 01 Sep 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260831085954-c3a6b617b3e5 31 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260830124655-1a878f3153b5 30 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta15 28 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260827024317-aa75cb686bc5 27 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260825084235-717bac77d860 25 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta14 25 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260825010802-b9cdb3eb69b5 25 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260824124437-07aa600e1b30 24 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260824075844-4b026025daa2 24 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260823024223-814c4fa5465b 23 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260822153537-c94a38a003bb 22 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260822005850-dd259bf126db 22 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta13 21 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260821075353-3f3d11f52684 21 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-alpha0821a 21 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260821044600-6b7de7e2c49f 21 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260820133200-98a72c9cbdf6 20 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-alpha0820 20 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260820080536-acbcfd13b09e 20 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260820032509-8d21b48dbf28 20 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta12 16 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta11 14 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta10 14 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260813095420-4bf0af1bff04 13 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260813075334-bdc2ca5fd68e 13 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260813061753-1fea09bde14f 13 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260812134141-3b73388c5c4c 12 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260812030231-555d3a72e0a3 12 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260811070255-0414f889d290 11 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9.0.20260811063008-dc2dbae515f5 11 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta9 07 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v0.0.0-20260806135938-2a1a6a0cef27 06 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta8.0.20260806135938-2a1a6a0cef27 06 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta8.0.20260806094242-5522334c7ffd 06 Aug 2026 H1 U1 AGPL-3.0 Yes Details →
v1.4.8-beta8.0.20260806071937-e1de549e2e70 06 Aug 2026 H1 U1 — Yes Details →
v1.4.8-beta8.0.20260806035039-565e11596995 06 Aug 2026 H1 U1 — Yes Details →
v1.4.8-beta8.0.20260805095317-358cd090e511 05 Aug 2026 H1 U1 — Yes Details →
v1.4.8-beta8.0.20260805061116-f4caf60d47b4 05 Aug 2026 H1 U1 — Yes Details →
v1.4.8-beta8.0.20260805022202-13779ca5595c 05 Aug 2026 H1 U1 — Yes Details →
v1.4.8-beta8.0.20260804100816-2a885a7063ea 04 Aug 2026 H1 U1 — Yes Details →
v1.4.8-beta8.0.20260804093525-2f06a18af8cf 04 Aug 2026 H1 U1 — Yes Details →
v1.4.8-alpha0804b 04 Aug 2026 H1 U1 — Yes Details →
v1.4.8-alpha0804a 04 Aug 2026 H1 U1 — Yes Details →
v1.4.8-beta8.0.20260803034711-97febd1af949 03 Aug 2026 H1 U1 — Yes Details →
v1.4.8-alpha0805 31 Jul 2026 H1 U1 — Yes Details →
v1.4.8-beta8 31 Jul 2026 H1 U1 — Yes Details →
v1.4.8-beta7 24 Jul 2026 H1 U1 — Yes Details →
v1.4.8-beta6 17 Jul 2026 H1 U1 — Yes Details →
v1.4.8-beta5 17 Jul 2026 H1 U1 — Yes Details →
v1.4.8-alpha0715a 15 Jul 2026 H1 U1 — Yes Details →
v1.4.8-beta4.0.20260714092125-d188f5ee8fa7 14 Jul 2026 H1 U1 — Yes Details →
v1.4.8-alpha0714a 14 Jul 2026 H1 U1 — Yes Details →
v1.4.8-beta4.0.20260713050548-e19294738e63 13 Jul 2026 H1 U1 — Yes Details →
v1.4.8-beta4.0.20260713003312-529bcc3f7c40 13 Jul 2026 H1 U1 — Yes Details →

The newest 120 of 1,196 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2023 1
  • 2024 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/yaklang/yaklang

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2023-40023: Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading 7.5 high 1.2.4-sp2 15 Aug 2023
CVE-2023-40023: Unauthorized Local File Reading in Yaklang Plugin's Fuzztag Component N/A unrated 1.2.4-sp2 21 Aug 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/yaklang/yaklang

Is github.com/yaklang/yaklang safe to use?

Vulert records 2 vulnerabilities for github.com/yaklang/yaklang in Go: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/yaklang/yaklang's Vulert package health score?

Vulert scores github.com/yaklang/yaklang 77/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Which version of github.com/yaklang/yaklang should I use?

v1.3.3 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/yaklang/yaklang have?

2 vulnerabilities are recorded for github.com/yaklang/yaklang in the Go ecosystem: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/yaklang/yaklang vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/yaklang/yaklang in the last 12 months, and the oldest entry in this database dates to 15 Aug 2023. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/yaklang/yaklang are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/yaklang/yaklang for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/yaklang/yaklang version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.