Go Package Vulnerabilities

All 1,476 Go modules with known CVEs, ranked by live CVE volume — 6,962 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 951.github.com/golang-jwt/jwt1 CVE
  2. 952.github.com/golang-jwt/jwt/v51 CVE
  3. 953.github.com/golang/vscode-go1 CVE
  4. 954.github.com/go-ldap/ldap1 CVE
  5. 955.github.com/go-macaron/csrf1 CVE
  6. 956.github.com/go-macaron/i18n1 CVE
  7. 957.github.com/googleapis/genai-toolbox1 CVE
  8. 958.github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp1 CVE
  9. 959.github.com/google/go-tpm1 CVE
  10. 960.github.com/google/nftables1 CVE
  11. 961.github.com/google/safearchive1 CVE
  12. 962.github.com/gookit/goutil1 CVE
  13. 963.github.com/go-pg/pg1 CVE
  14. 964.github.com/go-pg/pg/v101 CVE
  15. 965.github.com/go-pg/pg/v91 CVE
  16. 966.github.com/gopistolet/gopistolet1 CVE
  17. 967.github.com/go-pkgz/auth1 CVE
  18. 968.github.com/go-pkgz/auth/v21 CVE
  19. 969.github.com/goreleaser/goreleaser1 CVE
  20. 970.github.com/goreleaser/nfpm1 CVE
  21. 971.github.com/goreleaser/nfpm/v21 CVE
  22. 972.github.com/go-resty/resty/v21 CVE
  23. 973.github.com/gorilla/handlers1 CVE
  24. 974.github.com/gorilla/schema1 CVE
  25. 975.github.com/gorilla/websocket1 CVE
  26. 976.github.com/go-shiori/shiori1 CVE
  27. 977.github.com/go-sonic/sonic1 CVE
  28. 978.github.com/gotd/td1 CVE
  29. 979.github.com/gotify/server/v31 CVE
  30. 980.github.com/gouniverse/cms1 CVE
  31. 981.github.com/go-vela/compiler1 CVE
  32. 982.github.com/go-viper/mapstructure1 CVE
  33. 983.github.com/go-viper/mapstructure/v21 CVE
  34. 984.github.com/grafana/alloy1 CVE
  35. 985.github.com/grafana/google-sheets-datasource1 CVE
  36. 986.github.com/grafana/grafana-infinity-datasource1 CVE
  37. 987.github.com/grafana/grafana-operator1 CVE
  38. 988.github.com/grafana/grafana-operator/v31 CVE
  39. 989.github.com/grafana/grafana-operator/v41 CVE
  40. 990.github.com/grafana/grafana-operator/v51 CVE
  41. 991.github.com/grafana/grafana/pkg/web1 CVE
  42. 992.github.com/grafana/grafana-plugin-sdk-go1 CVE
  43. 993.github.com/grafana/loki/v31 CVE
  44. 994.github.com/grafana/pyroscope1 CVE
  45. 995.github.com/grafana/synthetic-monitoring-agent1 CVE
  46. 996.github.com/grafana/synthetic-monitoring-agent/cmd/synthetic-monitoring-agent1 CVE
  47. 997.github.com/graph-gophers/graphql-go1 CVE
  48. 998.github.com/graphql-go/graphql1 CVE
  49. 999.github.com/gruntwork-io/terragrunt1 CVE
  50. 1,000.github.com/guno1928/alos-http1 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →