Vulnerability Database · Go · Package report

gorm.io/gorm: vulnerability history, versions and safety

gorm.io/gorm is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

Vulert verdict on gorm.io/gorm v1.31.2 i

Updated on 23 Oct 2026

Good news: v1.31.2, the version you would install today, has no known vulnerabilities.

Package health score 83/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Stay on v1.31.2 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.31.2 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v1.31.2 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 39,981 i
  • OpenSSF scorecard 3/10 i
  • Last release 4 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for gorm.io/gorm, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.31.3-0.20260914162115-b3d3bf219f02 14 Sep 2026 none MIT — Details →
v1.31.2 22 Jun 2026 none MIT — Details →
v1.31.2-0.20260622033704-1d6ce9952806 22 Jun 2026 none MIT — Details →
v1.31.2-0.20260511094513-d0ee5e229615 11 May 2026 none MIT — Details →
v1.31.2-0.20260507142624-332292962288 07 May 2026 none MIT — Details →
v1.31.2-0.20260323100506-40cd2afdadf2 23 Mar 2026 none MIT — Details →
v1.31.2-0.20260321115139-ba38501922bb 21 Mar 2026 none MIT — Details →
v1.31.2-0.20260131083940-4380dd6dd1a5 31 Jan 2026 none MIT — Details →
v1.31.2-0.20251230081114-0d9141bad977 30 Dec 2025 none MIT — Details →
v1.31.2-0.20251122031436-e98dccce2fbb 22 Nov 2025 none MIT — Details →
v1.31.2-0.20251116041105-6e7eb0a07326 16 Nov 2025 none MIT — Details →
v1.31.2-0.20251104070452-0011f39aec71 04 Nov 2025 none MIT — Details →
v1.31.1 02 Nov 2025 none MIT — Details →
v1.31.1-0.20251031121356-a57abbe12651 31 Oct 2025 none MIT — Details →
v1.31.1-0.20251030111536-5eaf05a6c9c4 30 Oct 2025 none MIT — Details →
v1.31.1-0.20251026123109-141388f28b58 26 Oct 2025 none MIT — Details →
v1.31.1-0.20250919014906-b88148363a95 19 Sep 2025 none MIT — Details →
v1.31.0 12 Sep 2025 none MIT — Details →
v1.30.6-0.20250912043327-e015bd08ebb5 12 Sep 2025 none MIT — Details →
v0.0.0-20250909013433-faee391f05f3 09 Sep 2025 none MIT — Details →
v1.30.6-0.20250909013433-faee391f05f3 09 Sep 2025 none MIT — Details →
v1.30.5 08 Sep 2025 none MIT — Details →
v1.30.4 08 Sep 2025 none MIT — Details →
v1.30.3 04 Sep 2025 none MIT — Details →
v1.30.3-0.20250904131316-38404259fe79 04 Sep 2025 none MIT — Details →
v1.30.2 28 Aug 2025 none MIT — Details →
v1.30.2-0.20250826062429-7ceb0d9e63ca 26 Aug 2025 none MIT — Details →
v1.30.2-0.20250820045117-4e34a6d21b63 20 Aug 2025 none MIT — Details →
v1.30.2-0.20250818114452-725aa5b5ff4c 18 Aug 2025 none MIT — Details →
v1.30.2-0.20250804040730-6cc2c01268c2 04 Aug 2025 none MIT — Details →
v1.30.2-0.20250729110613-eb90a02a07a9 29 Jul 2025 none MIT — Details →
v1.30.2-0.20250728093458-22d5239dec78 28 Jul 2025 none MIT — Details →
v1.30.1 23 Jul 2025 none MIT — Details →
v1.30.1-0.20250723050249-49eaeacb892c 23 Jul 2025 none MIT — Details →
v1.30.1-0.20250722103228-52b4744410b4 22 Jul 2025 none MIT — Details →
v1.30.1-0.20250722062104-9af6d510b58c 22 Jul 2025 none MIT — Details →
v1.30.1-0.20250721095520-c63374f5d154 21 Jul 2025 none MIT — Details →
v1.30.1-0.20250721035712-985940f0d855 21 Jul 2025 none MIT — Details →
v0.0.0-20250721024658-991c2d4891dd 21 Jul 2025 none MIT — Details →
v1.30.1-0.20250721024658-991c2d4891dd 21 Jul 2025 none MIT — Details →
v1.30.1-0.20250715040503-751a6dde7a45 15 Jul 2025 none MIT — Details →
v1.30.1-0.20250707031510-2f4925e017f0 07 Jul 2025 none MIT — Details →
v0.0.0-20250625031108-1e8baf545953 25 Jun 2025 none MIT — Details →
v1.30.1-0.20250625031108-1e8baf545953 25 Jun 2025 none MIT — Details →
v1.30.1-0.20250606023501-842ee527ebde 06 Jun 2025 none MIT — Details →
v1.30.1-0.20250605113413-718eae4fddf9 05 Jun 2025 none MIT — Details →
v0.0.0-20250529062357-49b01a3e9372 29 May 2025 none MIT — Details →
v1.30.1-0.20250529062357-49b01a3e9372 29 May 2025 none MIT — Details →
v1.30.0 25 May 2025 none MIT — Details →
v1.26.2-0.20250525012721-751c1d6b4524 25 May 2025 none MIT — Details →
v1.26.2-0.20250523100634-4db3fde9c568 23 May 2025 none MIT — Details →
v1.26.2-0.20250522025347-8e7ab46c1b86 22 May 2025 none MIT — Details →
v1.26.2-0.20250521140720-304baabb12e2 21 May 2025 none MIT — Details →
v1.26.2-0.20250521031331-12043304197c 21 May 2025 none MIT — Details →
v1.26.1 07 May 2025 none MIT — Details →
v1.26.1-0.20250427060516-8c4e8e2d2a63 27 Apr 2025 none MIT — Details →
v1.26.0 25 Apr 2025 none MIT — Details →
v1.25.13-0.20250417073017-489a56329318 17 Apr 2025 none MIT — Details →
v1.25.13-0.20250417035513-42bd4f603c31 17 Apr 2025 none MIT — Details →
v1.25.13-0.20250415034200-3ae5fdee0ce4 15 Apr 2025 none MIT — Details →
v1.25.13-0.20250311075646-a9d27293de22 11 Mar 2025 none MIT — Details →
v1.25.13-0.20250309073517-ee3b549d7dbd 09 Mar 2025 none MIT — Details →
v1.25.13-0.20250213061626-9f273777f58a 13 Feb 2025 none MIT — Details →
v1.25.13-0.20250112114906-9ca84b3dde04 12 Jan 2025 none MIT — Details →
v0.0.0-20241206022744-f482f25c714b 06 Dec 2024 none MIT — Details →
v1.25.13-0.20241206022744-f482f25c714b 06 Dec 2024 none MIT — Details →
v0.0.0-20241121090331-6bfccf8afa84 21 Nov 2024 none MIT — Details →
v1.25.13-0.20241121090331-6bfccf8afa84 21 Nov 2024 none MIT — Details →
v0.0.0-20241114094143-49bbaa637f5d 14 Nov 2024 none MIT — Details →
v1.25.13-0.20241114094143-49bbaa637f5d 14 Nov 2024 none MIT — Details →
v1.25.13-0.20241114094018-b0d70a26d1ec 14 Nov 2024 none MIT — Details →
v0.0.0-20241017061813-deceebfab8c4 17 Oct 2024 none MIT — Details →
v1.25.13-0.20241017061813-deceebfab8c4 17 Oct 2024 none MIT — Details →
v1.25.13-0.20241010093148-780e1797a612 10 Oct 2024 none MIT — Details →
v1.25.13-0.20241009113104-52e3b353ebc7 09 Oct 2024 none MIT — Details →
v1.25.13-0.20240930061813-62bd0b9331b8 30 Sep 2024 none MIT — Details →
v1.25.13-0.20240930032119-c6ac54812a4f 30 Sep 2024 none MIT — Details →
v1.25.13-0.20240918120335-68434b76eb56 18 Sep 2024 none MIT — Details →
v1.25.13-0.20240914125829-7f75b12bb2c3 14 Sep 2024 none MIT — Details →
v0.0.0-20240822110342-0daaf1747cfa 22 Aug 2024 none MIT — Details →
v1.25.12 22 Aug 2024 none MIT — Details →
v1.25.12-0.20240822110342-0daaf1747cfa 22 Aug 2024 none MIT — Details →
v0.0.0-20240625023606-4a50b36f638c 25 Jun 2024 none MIT — Details →
v1.25.11 25 Jun 2024 none MIT — Details →
v1.25.11-0.20240625023606-4a50b36f638c 25 Jun 2024 none MIT — Details →
v1.25.11-0.20240624094259-11c4331058e5 24 Jun 2024 none MIT — Details →
v1.25.11-0.20240620121931-8a0af58cc531 20 Jun 2024 none MIT — Details →
v1.25.11-0.20240620084538-4f6291154b3c 20 Jun 2024 none MIT — Details →
v1.25.11-0.20240617035906-109f239fae95 17 Jun 2024 none MIT — Details →
v1.25.11-0.20240617035813-79bf7f92edec 17 Jun 2024 none MIT — Details →
v1.25.11-0.20240613104502-3d09f7947f97 13 Jun 2024 none MIT — Details →
v1.25.11-0.20240612105736-73a988ceb226 12 Jun 2024 none MIT — Details →
v1.25.11-0.20240612105233-05167fd5918f 12 Jun 2024 none MIT — Details →
v1.25.11-0.20240612034659-0f105ec163ea 12 Jun 2024 none MIT — Details →
v0.0.0-20240508040758-5e599a07ec6a 08 May 2024 none MIT — Details →
v1.25.11-0.20240508040758-5e599a07ec6a 08 May 2024 none MIT — Details →
v1.25.10 26 Apr 2024 none MIT — Details →
v1.25.10-0.20240426095311-9d370bcb3ec9 26 Apr 2024 none MIT — Details →
v1.25.10-0.20240426025317-ac59252327d6 26 Apr 2024 none MIT — Details →
v1.25.10-0.20240425122253-207f1ac68f71 25 Apr 2024 none MIT — Details →
v1.25.10-0.20240425121215-5553ff3dcb0d 25 Apr 2024 none — — Details →
v1.25.10-0.20240422064302-bc49365de239 22 Apr 2024 none — — Details →
v1.25.10-0.20240417033855-d0b4ceb726f2 17 Apr 2024 none — — Details →
v1.25.10-0.20240415032020-9a61ef2af83c 15 Apr 2024 none — — Details →
v1.25.10-0.20240408032955-1e13fd754382 08 Apr 2024 none — — Details →
v1.25.10-0.20240328084739-1b48aa072d12 28 Mar 2024 none — — Details →
v1.25.9 26 Mar 2024 none — — Details →
v1.25.9-0.20240326033336-26195e6d16cb 26 Mar 2024 none — — Details →
v1.25.9-0.20240321080002-956f7ce84309 21 Mar 2024 none — — Details →
v1.25.9-0.20240320114720-57603882ea79 20 Mar 2024 none — — Details →
v1.25.9-0.20240319035028-81536f823c05 19 Mar 2024 none — — Details →
v1.25.8 18 Mar 2024 none — — Details →
v1.25.8-0.20240318082846-e0c3be03fba9 18 Mar 2024 none — — Details →
v1.25.8-0.20240318033230-281f3e369a64 18 Mar 2024 none — — Details →
v1.25.8-0.20240315061448-7b1fb0bd7324 15 Mar 2024 none — — Details →
v1.25.8-0.20240309132719-e4e23d26d2d1 09 Mar 2024 none — — Details →
v1.25.8-0.20240309093128-9efae659cb47 09 Mar 2024 none — — Details →
v1.25.8-0.20240307081917-f17a75242e35 07 Mar 2024 none — — Details →
v0.0.0-20240305022351-3e2c4fc446f0 05 Mar 2024 none — — Details →
v1.25.8-0.20240305022351-3e2c4fc446f0 05 Mar 2024 none — — Details →

The newest 120 of 1,088 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for gorm.io/gorm

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About gorm.io/gorm

Is gorm.io/gorm safe to use?

Vulert has no vulnerabilities on record for gorm.io/gorm in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is gorm.io/gorm's Vulert package health score?

Vulert scores gorm.io/gorm 83/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of gorm.io/gorm affected?

No. v1.31.2, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of gorm.io/gorm should I use?

v1.31.2 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does gorm.io/gorm have?

0 vulnerabilities are recorded for gorm.io/gorm in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new gorm.io/gorm vulnerabilities disclosed?

0 vulnerabilities were recorded for gorm.io/gorm in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of gorm.io/gorm are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor gorm.io/gorm for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the gorm.io/gorm version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.