Is github.com/ory/kratos safe to use?

github.com/ory/kratos has 2 known vulnerabilities on the latest version (v1.3.1). DepScope rates its health at 63/100 (moderate risk).

What is the latest version of github.com/ory/kratos?

The latest version of github.com/ory/kratos is v1.3.1, released 2024-10-28.

Does github.com/ory/kratos have known vulnerabilities?

Yes. github.com/ory/kratos has 2 known vulnerabilities. See depscope.dev/pkg/go/github.com/ory/kratos for details.

Is github.com/ory/kratos deprecated?

No, github.com/ory/kratos is actively maintained. Latest release: v1.3.1 (2024-10-28).

What are alternatives to github.com/ory/kratos?

DepScope has no curated alternatives for github.com/ory/kratos at this time.

What license does github.com/ory/kratos use?

github.com/ory/kratos is licensed under Apache-2.0.

github.com/ory/kratos

govv1.3.1

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

License Apache-2.0permissive102 versions245 maintainers0 deps13,591 weekly dl

ory/kratos

/ 100

Health

update required

github.com/ory/[email protected] has vulnerabilities — update to latest

Update to >= 1.3.1-0.20260320110106-9d7085948039 to fix known vulnerabilities

1 high severity vulnerabilities

Health breakdown0 – 100

5/25

maintenance

10/20

popularity

20/25

security

15/15

maturity

13/15

community

Vulnerabilities

1 high1 low

Advisories (2)

Severity	ID	Summary	Fixed in
high	CVE-2026-33503	Ory Kratos has a SQL injection via forged pagination tokens	1.3.1-0.20260320110106-9d7085948039
unknown	CVE-2026-33503	Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos	1.3.1-0.20260320110106-9d7085948039

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/ory/kratos

Last updated · 2024-10-28T09:04:20Z