VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/Yubico/yubihsm-connector: vulnerability history, versions and safety

github.com/Yubico/yubihsm-connector is a package in the Go ecosystem. Vulert records 1 vulnerability for it across 120 releases, first recorded in Feb 2022. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
1 vulnerabilities recorded H1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/Yubico/yubihsm-connector vulnerabilities

Vulert verdict on github.com/Yubico/yubihsm-connector v0.0.0-20260910090226-753a3333ee41 i

Updated on 23 Oct 2026

Action needed: v0.0.0-20260910090226-753a3333ee41 has 1 known vulnerability, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 68/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Little adoption
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.0.0-20260910090226-753a3333ee41 — affected i
  • Vulnerabilities on record 1 over 1 year · 0 in the last year i
  • Latest disclosure 15 Feb 2022 i
  • Highest CVSS 5.4 i
  • With no published fix 0 i
  • Stars 43 i
  • OpenSSF scorecard 3/10 i
  • Last release 1 month ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/Yubico/yubihsm-connector, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20260910090226-753a3333ee41 10 Sep 2026 H1 Apache-2.0 Yes Details →
v0.0.0-20260126110721-76b26eb809a9 26 Jan 2026 H1 Apache-2.0 Yes Details →
v0.0.0-20260124105143-6458edd79503 24 Jan 2026 H1 Apache-2.0 Yes Details →
v0.0.0-20260117172604-0dfed6ac4c8d 17 Jan 2026 H1 Apache-2.0 Yes Details →
v0.0.0-20260116104132-d1efa5b37929 16 Jan 2026 H1 Apache-2.0 Yes Details →
v0.0.0-20251107225117-828c45cbdf2a 07 Nov 2025 H1 Apache-2.0 Yes Details →
v0.0.0-20251107034124-89857cc767d6 07 Nov 2025 H1 Apache-2.0 Yes Details →
v0.0.0-20250929164602-65c0b6bc3719 29 Sep 2025 H1 Apache-2.0 Yes Details →
v0.0.0-20250528103941-6e1a271608ca 28 May 2025 H1 Apache-2.0 Yes Details →
v0.0.0-20240908104341-e4063947e897 08 Sep 2024 H1 Apache-2.0 Yes Details →
v0.0.0-20240906105221-66e9ed4d4a2d 06 Sep 2024 H1 Apache-2.0 Yes Details →
v0.0.0-20240823130622-0cac192be6ce 23 Aug 2024 H1 Apache-2.0 Yes Details →
v0.0.0-20240823124246-f2068772328b 23 Aug 2024 H1 Apache-2.0 Yes Details →
v0.0.0-20240814111531-8e251bd5eed2 14 Aug 2024 H1 Apache-2.0 Yes Details →
v0.0.0-20240425113041-114dbeb2a6aa 25 Apr 2024 H1 Apache-2.0 Yes Details →
v0.0.0-20240425092519-1e945f4487a0 25 Apr 2024 H1 Apache-2.0 Yes Details →
v0.0.0-20231122143408-904f223cebe1 22 Nov 2023 H1 Apache-2.0 Yes Details →
v0.0.0-20231003144616-9145ac65bfca 03 Oct 2023 H1 Apache-2.0 Yes Details →
v0.0.0-20230810131901-24a1480dd860 10 Aug 2023 H1 Apache-2.0 Yes Details →
v0.0.0-20230113105205-42ed2d4bd8f9 13 Jan 2023 H1 Apache-2.0 Yes Details →
v0.0.0-20230113095649-01a89f87e6bd 13 Jan 2023 H1 Apache-2.0 Yes Details →
v0.0.0-20220913112634-caec7432a6d1 13 Sep 2022 H1 Apache-2.0 Yes Details →
v0.0.0-20220614115219-f676d45ec622 14 Jun 2022 H1 Apache-2.0 Yes Details →
v0.0.0-20220614095537-ee95baedb28c 14 Jun 2022 H1 Apache-2.0 Yes Details →
v0.0.0-20220510135702-0855424c63cd 10 May 2022 H1 Apache-2.0 Yes Details →
v0.0.0-20220504071921-836f86f4e3da 04 May 2022 H1 Apache-2.0 Yes Details →
v0.0.0-20220503123957-474471960a57 03 May 2022 H1 Apache-2.0 Yes Details →
v0.0.0-20220422102854-29de548879e2 22 Apr 2022 H1 Apache-2.0 Yes Details →
v0.0.0-20220422102844-166da3fd761b 22 Apr 2022 H1 Apache-2.0 Yes Details →
v0.0.0-20220422100255-a5729dfc1fff 22 Apr 2022 H1 Apache-2.0 Yes Details →
v0.0.0-20220422094453-3806e653ac34 22 Apr 2022 H1 Apache-2.0 Yes Details →
v0.0.0-20210921130435-c0153577e412 21 Sep 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210909121633-80cf37c8771c 09 Sep 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210909121012-74980caf71c2 09 Sep 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210909115931-938fefcf49f9 09 Sep 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210906131631-fac008e91e63 06 Sep 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210825122511-ea09dfaef65b 25 Aug 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210825121706-1ffd28e33900 25 Aug 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210825091536-8dae0b746746 25 Aug 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210825085228-69572fd90fa8 25 Aug 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210820160433-ee1429bcb800 20 Aug 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210819182541-3a9f0b5c399b 19 Aug 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210819112341-93df9f495c3c 19 Aug 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210813085001-96ff496f3417 13 Aug 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210812135206-f16b691bc3b0 12 Aug 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210702142210-e3a3d40ef682 02 Jul 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210701133319-ebdb480a2143 01 Jul 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210630080902-e9e9e1a5fa57 30 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629132048-6c12ca52ea98 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629130516-3212be6d8bd3 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629130125-dbb2f83013c9 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629125433-e986b4aed671 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629123038-8bad02db40cb 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629114852-9e0993cfa39c 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629091426-b833f62f1b20 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629090749-ae8319bfa432 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629085738-96604cebdc18 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629074353-2d405f37feff 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629073331-0f94fa4e5a36 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629072538-67fb5a9d9b4b 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629071439-a2c87d3c6e06 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210629071324-311e7c6ffcaa 29 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210628195303-703149d9a1f4 28 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210628194234-db9279b02714 28 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210628152253-e7ad032c75d9 28 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210628150555-7d7df657ae7b 28 Jun 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210429100044-ee1a2d4e9041 29 Apr 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210429001244-845d0449183b 29 Apr 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210415081325-58717c35fb39 15 Apr 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210322151554-ae307f089fcc 22 Mar 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210320085848-6ad40bd9dff0 20 Mar 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210315130039-82bdf202c534 15 Mar 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210315095627-33e94e9034ff 15 Mar 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210121093414-edbd86c4bfc5 21 Jan 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210115102627-9938883c2ae8 15 Jan 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20210115085659-2528d9ee56ea 15 Jan 2021 H1 Apache-2.0 Yes Details →
v0.0.0-20201201083917-cb53fc721b68 01 Dec 2020 H1 Apache-2.0 Yes Details →
v0.0.0-20201002154526-843cb44a66fa 02 Oct 2020 H1 Apache-2.0 Yes Details →
v0.0.0-20200714121715-328d3a640c52 14 Jul 2020 H1 Apache-2.0 Yes Details →
v0.0.0-20200714120130-6b2455611943 14 Jul 2020 H1 Apache-2.0 Yes Details →
v0.0.0-20200610005858-d74eeba67185 10 Jun 2020 H1 Apache-2.0 Yes Details →
v0.0.0-20200217104138-3d1aece4ad5b 17 Feb 2020 H1 Apache-2.0 Yes Details →
v0.0.0-20200207100308-a47f83e9502c 07 Feb 2020 H1 Apache-2.0 Yes Details →
v0.0.0-20200207094342-c4cd3e037bb7 07 Feb 2020 H1 Apache-2.0 Yes Details →
v0.0.0-20200130143710-904ea74ead15 30 Jan 2020 H1 Apache-2.0 Yes Details →
v0.0.0-20200130143710-9a46fb7910cc 30 Jan 2020 H1 Apache-2.0 Yes Details →
v0.0.0-20191230155543-b39616927a34 30 Dec 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20191223154310-f54f7e36de29 23 Dec 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20191219154527-4dfcec8589c7 19 Dec 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20191218172420-a0027d48bf7b 18 Dec 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20191218150311-214f6c38b9de 18 Dec 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20191218150311-35396a328ae3 18 Dec 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20191218150311-4818d6986d44 18 Dec 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20191218150311-49817c4e9422 18 Dec 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20191218150311-504cf5dedd4d 18 Dec 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20191218150311-58119965a14c 18 Dec 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20191218150311-8e510d61c28c 18 Dec 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20191218150311-b8d6acd698ac 18 Dec 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20191218150311-eb63e438f090 18 Dec 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20190930115754-49c06cd13f47 30 Sep 2019 H1 Apache-2.0 Yes Details →
v0.0.0-20190919131803-a54949b93f9b 19 Sep 2019 H1 — Yes Details →
v0.0.0-20190918144148-08b312359b2c 18 Sep 2019 H1 — Yes Details →
v0.0.0-20190918144112-af8f3a142547 18 Sep 2019 H1 — Yes Details →
v0.0.0-20190917091958-39b290e93082 17 Sep 2019 H1 — Yes Details →
v0.0.0-20190830010409-d484be4a5445 30 Aug 2019 H1 — Yes Details →
v0.0.0-20190830010358-0636fb17fc04 30 Aug 2019 H1 — Yes Details →
v0.0.0-20190605145117-1cfaa55b8322 05 Jun 2019 H1 — Yes Details →
v0.0.0-20190605103533-499a8a35d92b 05 Jun 2019 H1 — Yes Details →
v0.0.0-20190605103533-5221f88112d1 05 Jun 2019 H1 — Yes Details →
v0.0.0-20190605103524-79251c69c3a0 05 Jun 2019 H1 — Yes Details →
v0.0.0-20190321084339-a470c117de32 21 Mar 2019 H1 — Yes Details →
v0.0.0-20190312140715-d5087eb8ca9a 12 Mar 2019 H1 — Yes Details →
v0.0.0-20190304081624-5ddea51aebef 04 Mar 2019 H1 — Yes Details →
v0.0.0-20190227132943-15e040d3b2a8 27 Feb 2019 H1 — Yes Details →
v0.0.0-20190128105452-55742ef10d93 28 Jan 2019 H1 — Yes Details →
v0.0.0-20190125094325-51bd51921f4d 25 Jan 2019 H1 — Yes Details →
v0.0.0-20181127134809-713618318cdb 27 Nov 2018 H1 — Yes Details →
v0.0.0-20181127134713-75643b2d55ef 27 Nov 2018 H1 — Yes Details →
v0.0.0-20181127134647-94849dbdf67d 27 Nov 2018 H1 — Yes Details →
v0.0.0-20181126082221-5f8761dcdb79 26 Nov 2018 H1 — Yes Details →

All 120 versions Vulert tracks for this package. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 1 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/Yubico/yubihsm-connector

The 1 most severe of 1 vulnerabilities recorded for this package

Search all 1 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2021-28484: Infinite loop in Yubico yubihsm-connector 5.4 high 3.0.1 15 Feb 2022

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/Yubico/yubihsm-connector

Is github.com/Yubico/yubihsm-connector safe to use?

Vulert records 1 vulnerabilities for github.com/Yubico/yubihsm-connector in Go: 0 critical, 1 high, 0 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/Yubico/yubihsm-connector's Vulert package health score?

Vulert scores github.com/Yubico/yubihsm-connector 68/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/Yubico/yubihsm-connector affected?

Yes. v0.0.0-20260910090226-753a3333ee41, the version you would install today, has 1 known vulnerability, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/Yubico/yubihsm-connector should I use?

v0.0.0-20260910090226-753a3333ee41 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/Yubico/yubihsm-connector have?

1 vulnerability is recorded for github.com/Yubico/yubihsm-connector in the Go ecosystem: 0 critical, 1 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/Yubico/yubihsm-connector vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/Yubico/yubihsm-connector in the last 12 months, and the oldest entry in this database dates to 15 Feb 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/Yubico/yubihsm-connector are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/Yubico/yubihsm-connector for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/Yubico/yubihsm-connector version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.