Affected by GO-2024-2528 and 2 other vulnerabilities

GO-2024-2528: Etcd Gateway TLS endpoint validation only confirms TCP reachability in go.etcd.io/etcd

GO-2024-2529: Etcd embed auto compaction retention negative value causing a compaction loop or a crash in go.etcd.io/etcd

GO-2024-2530: Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only in go.etcd.io/etcd

The highest tagged major version is v3.

common/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Path	Synopsis
expfmt A package for reading and writing Prometheus metrics.	A package for reading and writing Prometheus metrics.
model Package model contains common data structures that are shared across Prometheus componenets and libraries.	Package model contains common data structures that are shared across Prometheus componenets and libraries.