Go Package Vulnerabilities
All 1,476 Go modules with known CVEs, ranked by live CVE volume — 6,958 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 1.github.com/mattermost/mattermost-server296 CVEs
- 2.github.com/mattermost/mattermost-server/v6222 CVEs
- 3.github.com/mattermost/mattermost/server/v8207 CVEs
- 4.github.com/mattermost/mattermost-server/v5199 CVEs
- 5.stdlib183 CVEs
- 6.code.gitea.io/gitea121 CVEs
- 7.github.com/siyuan-note/siyuan/kernel106 CVEs
- 8.github.com/usememos/memos74 CVEs
- 9.gogs.io/gogs71 CVEs
- 10.github.com/grafana/grafana66 CVEs
- 11.code.vikunja.io/api63 CVEs
- 12.github.com/traefik/traefik62 CVEs
- 13.github.com/traefik/traefik/v260 CVEs
- 14.github.com/rancher/rancher58 CVEs
- 15.github.com/hashicorp/vault55 CVEs
- 16.github.com/traefik/traefik/v352 CVEs
- 17.github.com/zitadel/zitadel52 CVEs
- 18.github.com/argoproj/argo-cd/v251 CVEs
- 19.k8s.io/kubernetes50 CVEs
- 20.github.com/argoproj/argo-cd49 CVEs
- 21.gitea.dev45 CVEs
- 22.github.com/filebrowser/filebrowser/v243 CVEs
- 23.github.com/filebrowser/filebrowser42 CVEs
- 24.golang.org/x/net38 CVEs
- 25.github.com/0xJacky/Nginx-UI36 CVEs
- 26.github.com/cilium/cilium36 CVEs
- 27.github.com/answerdev/answer34 CVEs
- 28.github.com/hashicorp/nomad34 CVEs
- 29.toolchain34 CVEs
- 30.github.com/docker/docker33 CVEs
- 31.github.com/openbao/openbao33 CVEs
- 32.github.com/fleetdm/fleet/v432 CVEs
- 33.github.com/hashicorp/consul32 CVEs
- 34.github.com/lxc/incus32 CVEs
- 35.github.com/lxc/incus/v632 CVEs
- 36.golang.org/x/crypto31 CVEs
- 37.github.com/rclone/rclone29 CVEs
- 38.github.com/coder/coder28 CVEs
- 39.github.com/coder/coder/v228 CVEs
- 40.github.com/openfga/openfga27 CVEs
- 41.github.com/kyverno/kyverno26 CVEs
- 42.github.com/nats-io/nats-server/v226 CVEs
- 43.github.com/ethereum/go-ethereum25 CVEs
- 44.github.com/containerd/containerd23 CVEs
- 45.helm.sh/helm/v323 CVEs
- 46.github.com/goharbor/harbor22 CVEs
- 47.github.com/casdoor/casdoor20 CVEs
- 48.github.com/go-gitea/gitea20 CVEs
- 49.github.com/gotenberg/gotenberg/v720 CVEs
- 50.github.com/gotenberg/gotenberg/v820 CVEs
Which Go packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Book a Demo →