github.com/future-architect/vuls
v0.40.1
#327 most downloaded on Go modules
future-architect/vuls
What this package is like to depend on
Last release today
24 Aug 2026
Ships on a steady schedule
a new release about every 1 weeks
Rarely documented
notes for 19 of 151 stable releases
Nothing withdrawn
no release was ever pulled
10 years old
1169 releases · first in 2016
216 releases in the last 12 months
see the full history below
Release timeline
1169 releases · Apr 2016 to Aug 2026Releases
latest 60 of 1169-
v0.40.2-0.20260824050910-8879b734c82924 Aug 2026 pre-releaseNothing published for this version
-
v0.40.2-0.20260819020311-386ec57759dd19 Aug 2026 pre-releaseNothing published for this version
-
v0.40.2-0.20260818062934-cb6d2e3fda5718 Aug 2026 pre-releaseNothing published for this version
-
v0.40.2-0.20260810000526-39f6cf1c71c710 Aug 2026 pre-releaseNothing published for this version
-
v0.40.2-0.20260804085343-86d476cfab4c04 Aug 2026 pre-releaseNothing published for this version
-
v0.40.2-0.20260803053321-95e4c7fc7e8803 Aug 2026 pre-releaseNothing published for this version
-
v0.40.2-0.20260803034417-63cf6b1d44e803 Aug 2026 pre-releaseNothing published for this version
-
v0.40.2-0.20260731094800-b7691ee93bf331 Jul 2026 pre-releaseNothing published for this version
-
v0.40.130 Jul 2026Release notes
Open source → -
v0.40.1-rc.130 Jul 2026 pre-releaseRelease notes
Open source → -
v0.40.029 Jul 2026Nothing published for this version
-
v0.40.0-rc.129 Jul 2026 pre-releaseRelease notes
Open source →Changelog
- 25d03d6 feat(detector/vuls2): adopt forward-compatible enum serde and surface evaluation warnings (#2609)
- 0050802 chore(deps): bump the go_modules group across 1 directory with 2 updates (#2611)
- 7cc6c21 chore(deps): bump the trivy group across 1 directory with 2 updates (#2597)
- 0b04ace chore(deps): bump the others group across 1 directory with 8 updates (#2608)
- 8b2f7c4 feat(detector/vuls2): use JPCERT-AT reference_titles for JVN alert title (#2610)
- 45714b6 feat(detector/vuls2): flatten CPE AND conjunctions to OR in vuls0 (#2606)
- 76c616f feat(detector/vuls2): ignore rejected/withdrawn CPE vulnerabilities (#2603)
- c4611e3 chore(deps): bump vuls-data-update and vuls2 to latest (#2602)
- cf9e99e perf(detector): share one vuls2 db session across a server's detect and enrich (#2600)
- b03f24e feat(detector): detect Seal Security patched library packages (#2596)
- 77a2bfc perf(detector): derive verified-product suppression from the detection result (#2592)
- 0d41be0 chore(deps): bump github.com/aquasecurity/trivy (#2573)
- 698946a chore(deps): bump the others group across 1 directory with 10 updates (#2595)
- 33eb699 chore(deps): bump the all group across 1 directory with 11 updates (#2593)
- 89a602c chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.10.0 to 0.11.0 (#2594)
- 7ea4a1e chore(deps): bump the all group across 1 directory with 2 updates (#2565)
- f621477 feat!(detector): route VulnCheck and JVN to vuls2 (#2590)
- 1297680 feat(detector): route Fortinet to vuls2 (#2591)
- 2d80751 feat(detector): route Palo Alto to vuls2 (#2589)
- c6b9778 feat!(detector): route Cisco to vuls2 (#2581)
- 61f32a4 feat(detector): enrich MITRE CVE v5 via vuls2 (#2586)
- 92e1e56 chore(deps): bump github.com/containerd/containerd (#2583)
- 635222e feat!(detector): replace go-cti with vuls2 (#2530)
- 9d8465a feat(detector/vuls2): enrich ENISA EUVD List via vuls2 (#2585)
- 024b0e2 feat!(detector): route NVD to vuls2 (#2575)
- e6acd26 test(detector/vuls2): rename enrich fixture mitre-v5 to mitre-cve-v5 (#2576)
-
v0.39.4-0.20260729031910-25d03d68a19b29 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260729020554-00508025157a29 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260729015214-7cc6c213900c29 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260729012303-0b04ace5a71c29 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260727020545-8b2f7c48089227 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260715101216-45714b6ff6e415 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260710092344-76c616f33f8d10 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260709052228-c4611e38f7bc09 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260707133820-cf9e99e3c39e07 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260707014917-b03f24ecdcea07 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260706044719-77a2bfc754e306 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260703071452-0d41be0e906803 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260703023146-698946aa7f3003 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260702090602-33eb6996480902 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260702084120-89a602cc147402 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260702050829-7ea4a1e0434702 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260701043209-f6214772f48c01 Jul 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260630125741-1297680e682f30 Jun 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260630062223-2d8075108c3830 Jun 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260629061457-c6b9778d096429 Jun 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260626055116-61f32a4e483526 Jun 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260626033042-92e1e56266e626 Jun 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260625065013-635222e1551b25 Jun 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260625011626-9d8465a8176625 Jun 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260624023301-024b0e261bea24 Jun 2026 pre-releaseNothing published for this version
-
v0.39.4-0.20260618082819-e6acd26d513f18 Jun 2026 pre-releaseNothing published for this version
-
v0.39.309 Jun 2026Release notes
Open source →Changelog
- 5ce5623 fix!(scanner): treat AnalyzeLibrary failures as warnings instead of errors (#2574)
- 75fc521 chore(deps): bump the all group across 1 directory with 3 updates (#2572)
- 30ed4d4 feat(config): update GetEOL with newly released OS versions (#2570)
- 2b36046 chore(deps): bump the go_modules group across 1 directory with 2 updates (#2566)
- 6ef6ba4 feat!(detector): detect windows with vuls2 (#2499)
- 259e694 fix(detector/vuls2): normalize Amazon Linux release in preConvert (#2562)
-
v0.39.3-0.20260609090818-5ce56238223d09 Jun 2026 pre-releaseNothing published for this version
-
v0.39.3-0.20260603094712-75fc521c2a4a03 Jun 2026 pre-releaseNothing published for this version
-
v0.39.3-0.20260602092722-3266337a725b02 Jun 2026 pre-releaseNothing published for this version
-
v0.39.3-0.20260602081525-30ed4d422f4402 Jun 2026 pre-releaseNothing published for this version
-
v0.39.3-0.20260528073239-2b360462c9f828 May 2026 pre-releaseNothing published for this version
-
v0.39.3-0.20260528062238-6ef6ba4078ab28 May 2026 pre-releaseNothing published for this version
-
v0.39.3-0.20260521052032-259e69444d6621 May 2026 pre-releaseNothing published for this version
-
v0.39.220 May 2026 -
v0.39.2-0.20260519050954-da0e250aaed619 May 2026 pre-releaseNothing published for this version
-
v0.39.2-0.20260518131239-1b9751899ea118 May 2026 pre-releaseNothing published for this version
-
v0.39.118 May 2026Release notes
Open source → -
v0.39.1-0.20260518070614-7729cd8e2c9518 May 2026 pre-releaseNothing published for this version
-
v0.39.1-0.20260517144505-e35f8dcbc8be17 May 2026 pre-releaseNothing published for this version
-
v0.39.1-0.20260517120832-598c28e384d017 May 2026 pre-releaseNothing published for this version
-
v0.39.012 May 2026Release notes
Open source →Changelog
- 5cd03fc chore(deps): bump github.com/go-git/go-git/v5 (#2549)
- 6034b6d feat(scanner): add pylock.toml detection (PEP 751) (#2548)
- 0244ae1 deps(dict): bump go-cve-dictionary, go-cti, gost (#2547)
- c5262f8 chore(deps): bump github.com/aquasecurity/trivy (#2521)
- a9079d5 chore(deps): bump the all group across 1 directory with 2 updates (#2546)
- 1f896e5 chore(deps): bump the others group across 1 directory with 6 updates (#2540)
- 230527e fix(config): refresh openSUSE Leap EOL entries (add 16.0, extend 15.6) (#2543)
- 6372c4c fix(detector/library): regenerate PURL after JAR SHA1 canonicalization (#2533)
- a975238 feat(detector/vuls2): thread RedHat CVE Mitigation into VulnInfo (#2532)
- 18abe61 test(scanner): source lockfiles from vulsio/integration (#2531)
- 52eff31 chore(deps): bump the go_modules group across 1 directory with 2 updates (#2527)
- f235b9c chore(deps): bump the all group across 1 directory with 5 updates (#2526)
- 0e039bb chore(deps): bump the all group across 1 directory with 2 updates (#2525)
- c08f424 chore(deps): bump the others group across 1 directory with 5 updates (#2523)
- bb3cad0 feat(config/os): add ubuntu 26.04 (#2524)
- 71ddc50 chore(deps): bump the go_modules group across 1 directory with 5 updates (#2520)
- 4c71b0a feat!(detector): replace go-exploitdb with vuls2 (#2517)
- 9991a0f feat(scanner/windows): update kb supersession (#2518)
- b780bb3 feat(detector): add DataSources filter to enrich function (#2513)
- 8383d40 feat!(detector): relace go-msfdb with vuls2 (#2512)
- 234664c feat!(detector): replace go-kev with vuls2 (#2509)
- afd0c4d fix(detector): enrich all detected CVEs, not only vuls2-detected ones (#2511)
- fadbbaa feat!(detector): replace gost.FillCVEsWithRedHat with vuls2 (#2505)
- d9876d1 fix(detector/vuls2): skip advisory fallback for ignored vulns (#2508)
- 5119155 refactor: remove GraphQL-based GitHub detection, add Dependency.PURL (#2502)
- c7e3461 refactor(scanner/windows): detect version by build number only (#2503)
- ff914c8 chore(deps): bump actions/setup-go in the all group across 1 directory (#2497)
- 01e3a26 chore(deps): bump the others group across 1 directory with 12 updates (#2498)
- b67629c chore(deps): bump the go_modules group across 1 directory with 2 updates (#2495)
- 44e160e fix(contrib/trivy): dedup package names and add dup warnings (#2491)
- 652294a deps: remove fanal framework, call Trivy parsers directly (#2476)
- b9ac2ff chore!(contrib/docker): temporarily remove fvuls docker publish (#2483)
- 35a36c1 fix(subcmds/report): remove trivy's tmp directory (#2482)
- b610fa5 deps: remove trivy/pkg/cache import, replace with local helper (#2478)
- d2acdcd chore(deps): bump google.golang.org/grpc (#2477)
- f9865db chore(ci): update GitHub Actions workflows (#2474)
- 95a1e30 fix(ci/diet): fix shell heredoc in diet-check.yml (#2471)
- 622a72a chore(ci): add Diet PR metrics workflow (#2469)
- 3fbd296 fix(models): include CPE vulns in total, set "unknown" patch status (#2460)
- 16a9088 fix(detector/vuls2): backport ubuntu fix (#2458)
- adbc480 fix(reporter/sbom): add WindowsKB to SBOM output (#2454)
- 173aacf feat!(detector): detect debian with vuls2 (#2448)
-
v0.38.7-alpha.117 Mar 2026 pre-releaseNothing published for this version
-
v0.38.7-0.20260512012747-6034b6d987fb12 May 2026 pre-releaseNothing published for this version
-
v0.38.7-0.20260511064608-0244ae1f457411 May 2026 pre-releaseNothing published for this version
-
v0.38.7-0.20260511032305-c5262f8870a611 May 2026 pre-releaseNothing published for this version
-
v0.38.7-0.20260511023045-a9079d51ccb411 May 2026 pre-releaseNothing published for this version
-
v0.38.7-0.20260511020922-1f896e57bbec11 May 2026 pre-releaseNothing published for this version