Go Package Vulnerabilities

All 1,317 Go modules with known CVEs, ranked by live CVE volume — 5,619 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 601.github.com/AndrewBurian/powermux1 CVE
  2. 602.github.com/Anipaleja/nginx-defender1 CVE
  3. 603.github.com/antchfx/xmlquery1 CVE
  4. 604.github.com/antchfx/xpath1 CVE
  5. 605.github.com/apache/age/drivers/golang1 CVE
  6. 606.github.com/apache/camel-k1 CVE
  7. 607.github.com/apache/camel-k/v21 CVE
  8. 608.github.com/apache/skywalking-mcp1 CVE
  9. 609.github.com/apache/solr-operator1 CVE
  10. 610.github.com/appc/docker2aci1 CVE
  11. 611.github.com/appleboy/gorush1 CVE
  12. 612.github.com/argoproj/argo-cd/v2/server1 CVE
  13. 613.github.com/arkmq-org/activemq-artemis-operator1 CVE
  14. 614.github.com/artdarek/go-unzip1 CVE
  15. 615.github.com/authorizerdev/authorizer1 CVE
  16. 616.github.com/autobrr/qui1 CVE
  17. 617.github.com/aws/amazon-cloudwatch-agent1 CVE
  18. 618.github.com/aws/amazon-s3-encryption-client-go1 CVE
  19. 619.github.com/aws/amazon-s3-encryption-client-go/v31 CVE
  20. 620.github.com/aws/amazon-s3-encryption-client-go/v41 CVE
  21. 621.github.com/aws/aws-advanced-go-wrapper/auth-helpers1 CVE
  22. 622.github.com/aws/aws-advanced-go-wrapper/aws-secrets-manager1 CVE
  23. 623.github.com/aws/aws-advanced-go-wrapper/awssql1 CVE
  24. 624.github.com/aws/aws-advanced-go-wrapper/awssql/v21 CVE
  25. 625.github.com/aws/aws-advanced-go-wrapper/custom-endpoint1 CVE
  26. 626.github.com/aws/aws-advanced-go-wrapper/federated-auth1 CVE
  27. 627.github.com/aws/aws-advanced-go-wrapper/iam1 CVE
  28. 628.github.com/aws/aws-advanced-go-wrapper/mysql-driver1 CVE
  29. 629.github.com/aws/aws-advanced-go-wrapper/okta1 CVE
  30. 630.github.com/aws/aws-advanced-go-wrapper/otlp1 CVE
  31. 631.github.com/aws/aws-advanced-go-wrapper/pgx-driver1 CVE
  32. 632.github.com/aws/aws-advanced-go-wrapper/xray1 CVE
  33. 633.github.com/awslabs/aws-alb-route-directive-adapter-for-istio1 CVE
  34. 634.github.com/Azure/aad-pod-identity1 CVE
  35. 635.github.com/Azure/azure-sdk-for-go/sdk/azidentity1 CVE
  36. 636.github.com/Azure/go-ntlmssp1 CVE
  37. 637.github.com/Azure/secrets-store-csi-driver-provider-azure1 CVE
  38. 638.github.com/b3log/wide1 CVE
  39. 639.github.com/bazelbuild/intellij1 CVE
  40. 640.github.com/benc-uk/kubeview1 CVE
  41. 641.github.com/bettercap/bettercap1 CVE
  42. 642.github.com/biscuit-auth/biscuit-go1 CVE
  43. 643.github.com/BishopFox/joro1 CVE
  44. 644.github.com/BishopFox/sliver1 CVE
  45. 645.github.com/bitnami-labs/sealed-secrets1 CVE
  46. 646.github.com/bits-and-blooms/bloom1 CVE
  47. 647.github.com/blevesearch/bleve1 CVE
  48. 648.github.com/blevesearch/bleve/v21 CVE
  49. 649.github.com/bpg/terraform-provider-proxmox1 CVE
  50. 650.github.com/bradleyfalzon/ghinstallation1 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →