Go Package Vulnerabilities
All 1,317 Go modules with known CVEs, ranked by live CVE volume — 5,619 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 1,051.github.com/openbao/openbao-plugins1 CVE
- 1,052.github.com/openbao/openbao/sdk1 CVE
- 1,053.github.com/openbao/openbao/sdk/v21 CVE
- 1,054.github.com/openclarity/kubeclarity/backend1 CVE
- 1,055.github.com/opencloud-eu/reva1 CVE
- 1,056.github.com/opencloud-eu/reva/v21 CVE
- 1,057.github.com/opencontainers/distribution-spec1 CVE
- 1,058.github.com/opencontainers/umoci1 CVE
- 1,059.github.com/opencost/opencost1 CVE
- 1,060.github.com/open-falcon/falcon-plus1 CVE
- 1,061.github.com/openflagr/flagr1 CVE
- 1,062.github.com/openkruise/kruise1 CVE
- 1,063.github.com/openmeterio/openmeter1 CVE
- 1,064.github.com/open-policy-agent/opa-envoy-plugin1 CVE
- 1,065.github.com/open-policy-agent/opa/server1 CVE
- 1,066.github.com/open-policy-agent/opa/v1/server1 CVE
- 1,067.github.com/openpubkey/openpubkey1 CVE
- 1,068.github.com/openpubkey/opkssh1 CVE
- 1,069.github.com/openrundev/openrun1 CVE
- 1,070.github.com/openshift/assisted-installer1 CVE
- 1,071.github.com/openshift/builder1 CVE
- 1,072.github.com/openshift/cluster-monitoring-operator1 CVE
- 1,073.github.com/openshift/must-gather1 CVE
- 1,074.github.com/openshift/openshift-apiserver1 CVE
- 1,075.github.com/openshift/openshift-controller-manager1 CVE
- 1,076.github.com/openshift/osin1 CVE
- 1,077.github.com/openshift/source-to-image1 CVE
- 1,078.github.com/openshift/telemeter1 CVE
- 1,079.github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter1 CVE
- 1,080.github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension1 CVE
- 1,081.github.com/open-telemetry/opentelemetry-collector-contrib/extension/bearertokenauthextension1 CVE
- 1,082.github.com/open-telemetry/opentelemetry-collector-contrib/receiver/awsfirehosereceiver1 CVE
- 1,083.github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver1 CVE
- 1,084.github.com/open-telemetry/opentelemetry-operator1 CVE
- 1,085.github.com/operator-framework/operator-sdk1 CVE
- 1,086.github.com/orneryd/nornicdb1 CVE
- 1,087.github.com/ory/hydra/v21 CVE
- 1,088.github.com/ory/keto1 CVE
- 1,089.github.com/ossf/allstar1 CVE
- 1,090.github.com/ouqiang/gocron1 CVE
- 1,091.github.com/ovn-org/ovn-kubernetes1 CVE
- 1,092.github.com/oxyno-zeta/s3-proxy/cmd/s3-proxy1 CVE
- 1,093.github.com/pandatix/go-cvss1 CVE
- 1,094.github.com/pelicanplatform/pelican1 CVE
- 1,095.github.com/phires/go-guerrilla1 CVE
- 1,096.github.com/pilinux/gorest1 CVE
- 1,097.github.com/pion/dtls/v31 CVE
- 1,098.github.com/pion/interceptor1 CVE
- 1,099.github.com/pion/webrtc/v31 CVE
- 1,100.github.com/pipe-cd/pipecd1 CVE
Which Go packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Start Free Scan →