github.com/go-acme/lego/v4
Let's Encrypt/ACME client and library written in Go
View on Github
Activity
- Latest release
- 4mo ago
- Total releases
- 20
- Cadence
- ~15 days
- Last 12 months
- 13
Reach
- Stars
- 9.9k
Details
- First release
- Apr 16, 2025
| Version | Released | |
|---|---|---|
v4.35.2
patch
|
v4.35.2
patch
Dependencies (99)
+ 91 more |
|
v4.35.1
patch
|
v4.35.1
patch
Dependencies (99)
+ 91 more |
|
v4.35.0
minor
|
v4.35.0
minor
Dependencies (99)
+ 91 more |
|
v4.34.0
minor
|
v4.34.0
minor
Dependencies (99)
+ 91 more |
|
v4.33.0
minor
1 CVE
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev |
v4.33.0
minor
Dependencies (97)
+ 89 more |
|
v4.32.0
minor
1 CVE
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev |
v4.32.0
minor
Dependencies (97)
+ 89 more |
|
v4.31.0
minor
1 CVE
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev |
v4.31.0
minor
Dependencies (97)
+ 89 more |
|
v4.30.1
patch
1 CVE
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev |
v4.30.1
patch
Dependencies (96)
+ 88 more |
|
v4.30.0
minor
1 CVE
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev |
v4.30.0
minor
Dependencies (96)
+ 88 more |
|
v4.29.0
minor
1 CVE
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev |
v4.29.0
minor
Dependencies (95)
+ 87 more |
|
v4.28.1
patch
1 CVE
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev |
v4.28.1
patch
Dependencies (94)
+ 86 more |
|
v4.28.0
minor
1 CVE
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev |
v4.28.0
minor
Dependencies (94)
+ 86 more |
|
v4.27.0
minor
1 CVE
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev |
v4.27.0
minor
Dependencies (94)
+ 86 more |
|
v4.26.0
minor
1 CVE
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev |
v4.26.0
minor
Dependencies (94)
+ 86 more |
|
v4.25.2
patch
1 CVE
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev |
v4.25.2
patch
Dependencies (92)
+ 84 more |
|
v4.25.1
patch
2 CVEs
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev
CVE-2025-54799
GO-2025-3847
GHSA-q82r-2j7m-9rv4
Aug 11, 2025
Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego Fixed in
4.25.2
References Updated Feb 04, 2026 · Source: OSV.dev |
v4.25.1
patch
Dependencies (92)
+ 84 more |
|
v4.25.0
minor
2 CVEs
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev
CVE-2025-54799
GO-2025-3847
GHSA-q82r-2j7m-9rv4
Aug 11, 2025
Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego Fixed in
4.25.2
References Updated Feb 04, 2026 · Source: OSV.dev |
v4.25.0
minor
Dependencies (92)
+ 84 more |
|
v4.24.0
minor
2 CVEs
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev
CVE-2025-54799
GO-2025-3847
GHSA-q82r-2j7m-9rv4
Aug 11, 2025
Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego Fixed in
4.25.2
References Updated Feb 04, 2026 · Source: OSV.dev |
v4.24.0
minor
Dependencies (91)
+ 83 more |
|
v4.23.1
patch
2 CVEs
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev
CVE-2025-54799
GO-2025-3847
GHSA-q82r-2j7m-9rv4
Aug 11, 2025
Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego Fixed in
4.25.2
References Updated Feb 04, 2026 · Source: OSV.dev |
v4.23.1
patch
Dependencies (87)
+ 79 more |
|
v4.23.0
initial
2 CVEs
CVE-2026-40611
GO-2026-5593
GHSA-qqx8-2xmm-jrv8
Jul 24, 2026
ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider in github.com/go-acme/lego Fixed in
4.34.0
Updated Jul 24, 2026 · Source: OSV.dev
CVE-2025-54799
GO-2025-3847
GHSA-q82r-2j7m-9rv4
Aug 11, 2025
Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego Fixed in
4.25.2
References Updated Feb 04, 2026 · Source: OSV.dev |
v4.23.0
initial
Dependencies (87)
+ 79 more |