VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

go.temporal.io/api: vulnerability history, versions and safety

go.temporal.io/api is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from Feb 2025 to Mar 2025. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded L1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all go.temporal.io/api vulnerabilities

Vulert verdict on go.temporal.io/api v1.64.0 i

Updated on 23 Oct 2026

Action needed: v1.64.0 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 75/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.64.0 — affected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 03 Mar 2025 i
  • Highest CVSS 2.0 i
  • With no published fix 0 i
  • Stars 54 i
  • OpenSSF scorecard 4/10 i
  • Last release this month i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for go.temporal.io/api, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.64.1-0.20261021060621-761694af67bd 21 Oct 2026 L1 U1 MIT Yes Details →
v1.64.1-0.20261020185106-8d73fed19a61 20 Oct 2026 L1 U1 MIT Yes Details →
v1.64.1-0.20261020154407-f53a0c7b1e11 20 Oct 2026 L1 U1 MIT Yes Details →
v1.64.1-0.20261020125519-252ef9ebfa6a 20 Oct 2026 L1 U1 MIT Yes Details →
v1.63.8-0.20261016215345-3926793dec12 16 Oct 2026 L1 U1 MIT Yes Details →
v1.64.0 16 Oct 2026 L1 U1 MIT Yes Details →
v1.63.8-0.20261014221631-25d6833c5701 14 Oct 2026 L1 U1 MIT Yes Details →
v1.63.8-0.20261014185832-c9461dc1da2c 14 Oct 2026 L1 U1 MIT Yes Details →
v1.63.8-0.20261014175806-0610a4fb399a 14 Oct 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20261014075015-d41380e9d4f6 14 Oct 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20261014071811-1a2da2251097 14 Oct 2026 L1 U1 MIT Yes Details →
v1.63.8-0.20261013161436-735d0eaa48a0 13 Oct 2026 L1 U1 MIT Yes Details →
v1.63.8-0.20261012181241-53ba1c39325c 12 Oct 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20261009030259-9461d99927cf 09 Oct 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20261008215930-cdda301d97b4 08 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261008215930-cdda301d97b4 08 Oct 2026 L1 U1 MIT Yes Details →
v1.63.8-0.20261008215930-cdda301d97b4 08 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261008212609-555b97e92c27 08 Oct 2026 L1 U1 MIT Yes Details →
v1.63.8-0.20261008212609-555b97e92c27 08 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261007194703-231bd9a8d53a 07 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7 06 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261006170555-05ff170da40c 06 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261006055549-2e943420205f 06 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261005144420-7417911d2ea0 05 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261005144141-d98d79655b7b 05 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261005054911-83cc57dcaf70 05 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261002204259-1c070db53866 02 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261002173242-6bb23935006a 02 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261002150604-6b55806007ed 02 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261002035420-c3ce45507623 02 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261001234847-bd20f138ed60 01 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20261001233150-e5dbbb8d5b12 01 Oct 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20260930193619-f87199240612 30 Sep 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20260930182703-200ed65690e0 30 Sep 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260919001421-0303ad186683 19 Sep 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260916200145-1f7eb7a5c0d4 16 Sep 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20260916200145-1f7eb7a5c0d4 16 Sep 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20260916185306-f12a088a7cc8 16 Sep 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260910200743-859a8e8d17c0 10 Sep 2026 L1 U1 MIT Yes Details →
v1.63.7-0.20260910200743-859a8e8d17c0 10 Sep 2026 L1 U1 MIT Yes Details →
v1.63.6 09 Sep 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260909222256-20151aa90480 09 Sep 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260908155414-d6c9826089f9 08 Sep 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260903152541-8968e8826f22 03 Sep 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260902151808-33919a28916a 02 Sep 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260901211101-1afd9b10cdca 01 Sep 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260831232338-79f9bb05242b 31 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260831205652-f1ab20ad0c74 31 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260831172353-b460f1087a71 31 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260831152653-7c150493b7be 31 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260828205639-114683794bcb 28 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260828183909-f2c1e354eb6c 28 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260825170506-bd1da98aab15 25 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260824203247-b19bac248f32 24 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260823202248-4fc68e4a3223 23 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260820232214-10bbdc9746cc 20 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260819173644-14a6a42d0634 19 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260819173518-cfec6ae72957 19 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260818174708-81166217e734 18 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260818150204-85042fb4769b 18 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260817194757-a6c6fa62a63b 17 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260817175255-eccd9af9829a 17 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260814164238-e3746832e448 14 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260813191931-67c54e4d366e 13 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260813164558-e662b94232b6 13 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260813163239-6857aa2c1c50 13 Aug 2026 L1 U1 MIT Yes Details →
v1.63.6-0.20260811224032-89570b10e9e2 11 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260807222337-19f8fa7441f2 07 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260807215854-53d94388d4d8 07 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5 04 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260804201935-e54fd69950e1 04 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260803183639-0e1e8c485f37 03 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260801145944-7d3e83125496 01 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260801132948-cd1e04b1fc6e 01 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260801132652-64335d0f19ac 01 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260801025908-87eb6486174e 01 Aug 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260731192738-ce59c26df678 31 Jul 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260731173100-2453054381c9 31 Jul 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260731171636-ebc5f292bc94 31 Jul 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260731164320-beafdd4b0d8f 31 Jul 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260730203810-e7387ebd980e 30 Jul 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260730194729-ba94140a7640 30 Jul 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260730005159-e167387d23f4 30 Jul 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260729212027-86b1dd7f9550 29 Jul 2026 L1 U1 MIT Yes Details →
v1.63.4-0.20260729205600-36d14d720429 29 Jul 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260729182954-9f44b948d997 29 Jul 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260729181830-3949bb140154 29 Jul 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260729175855-7f19b3279959 29 Jul 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260728230305-1701cc45accd 28 Jul 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260728212633-61d9b2fe40ca 28 Jul 2026 L1 U1 MIT Yes Details →
v1.63.5-0.20260727181407-23827275504e 27 Jul 2026 L1 U1 MIT Yes Details →
v1.63.4-0.20260726063636-349020f55c75 26 Jul 2026 L1 U1 MIT Yes Details →
v1.63.4-0.20260724233611-d22c21c3cfe6 24 Jul 2026 L1 U1 MIT Yes Details →
v1.63.4-0.20260724210638-0ee3c81c4ba0 24 Jul 2026 L1 U1 MIT Yes Details →
v1.63.4-0.20260724202533-9015742e7f06 24 Jul 2026 L1 U1 MIT Yes Details →
v1.63.4-0.20260723233445-8c30a7d77076 23 Jul 2026 L1 U1 MIT Yes Details →
v1.63.4-0.20260723223619-864714b47375 23 Jul 2026 L1 U1 MIT Yes Details →
v1.63.4 23 Jul 2026 L1 U1 MIT Yes Details →
v1.63.4-0.20260723205601-60e39586a91f 23 Jul 2026 L1 U1 MIT Yes Details →
v1.63.4-0.20260723165907-8335003978d3 23 Jul 2026 L1 U1 MIT Yes Details →
v1.63.4-0.20260723014213-ee1b13912910 23 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260722231158-655e4f9a4f6d 22 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260722222741-0cb7d18411a5 22 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260722170540-d887973f0ebc 22 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260721225333-02639480020c 21 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260721004603-5b46a7132865 21 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260720212511-a086e3776097 20 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260720155646-7a3ca3626ec2 20 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260719232400-f9e031effa8f 19 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260719230552-aa57c3fcca1f 19 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260717222957-a7fa39a3059e 17 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260717212253-07f8a2ff9bd5 17 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260717191938-c71f2d6b6b69 17 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260717162404-0867352e9b7f 17 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260717004907-c05239d2c9d8 17 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260716185437-1b343e37c63b 16 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260716034231-233d261c148d 16 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260715180935-098def9a0389 15 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260714232926-421d65d20788 14 Jul 2026 L1 U1 — Yes Details →
v1.63.4-0.20260714230652-9624eed0ed99 14 Jul 2026 L1 U1 — Yes Details →

The newest 120 of 1,602 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2025 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for go.temporal.io/api

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2025-1243: Unencrypted Transmission in Temporal API-Go Library 2.0 low 1.44.1 12 Feb 2025
CVE-2025-1243: Unencrypted Transmission in go.temporal.io/api Library N/A unrated 1.44.1 03 Mar 2025

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About go.temporal.io/api

Is go.temporal.io/api safe to use?

Vulert records 2 vulnerabilities for go.temporal.io/api in Go: 0 critical, 0 high, 0 medium and 1 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is go.temporal.io/api's Vulert package health score?

Vulert scores go.temporal.io/api 75/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of go.temporal.io/api affected?

Yes. v1.64.0, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does go.temporal.io/api have?

2 vulnerabilities are recorded for go.temporal.io/api in the Go ecosystem: 0 critical, 0 high, 0 medium and 1 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new go.temporal.io/api vulnerabilities disclosed?

0 vulnerabilities were recorded for go.temporal.io/api in the last 12 months, and the oldest entry in this database dates to 12 Feb 2025. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of go.temporal.io/api are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor go.temporal.io/api for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the go.temporal.io/api version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.