Go Package Vulnerabilities
All 1,317 Go modules with known CVEs, ranked by live CVE volume — 5,619 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 1,201.github.com/traPtitech/traQ1 CVE
- 1,202.github.com/trufflesecurity/trufflehog1 CVE
- 1,203.github.com/trufflesecurity/trufflehog/v31 CVE
- 1,204.github.com/tursodatabase/turso-cli1 CVE
- 1,205.github.com/turt2live/matrix-media-repo1 CVE
- 1,206.github.com/txthinking/brook1 CVE
- 1,207.github.com/tyktechnologies/tyk-identity-broker1 CVE
- 1,208.github.com/TykTechnologies/tyk-identity-broker1 CVE
- 1,209.github.com/uber/kraken1 CVE
- 1,210.github.com/umputun/remark421 CVE
- 1,211.github.com/Unstructured-IO/unstructured1 CVE
- 1,212.github.com/updatecli/updatecli1 CVE
- 1,213.github.com/uptrace/bun/driver/pgdriver1 CVE
- 1,214.github.com/u-root/u-root/pkg/cpio1 CVE
- 1,215.github.com/v2fly/v2ray-core1 CVE
- 1,216.github.com/v2fly/v2ray-core/v41 CVE
- 1,217.github.com/valyala/fasthttp1 CVE
- 1,218.github.com/vbatts/tar-split1 CVE
- 1,219.github.com/vektah/gqlparser1 CVE
- 1,220.github.com/vektah/gqlparser/v21 CVE
- 1,221.github.com/VictoriaMetrics/VictoriaMetrics1 CVE
- 1,222.github.com/vitessio/vitess1 CVE
- 1,223.github.com/volcano-sh/volcano1 CVE
- 1,224.github.com/wal-g/wal-g1 CVE
- 1,225.github.com/weaveworks/tf-controller1 CVE
- 1,226.github.com/weaveworks/weave1 CVE
- 1,227.github.com/whilp/git-urls1 CVE
- 1,228.github.com/whyrusleeping/tar-utils1 CVE
- 1,229.github.com/windmill-labs/windmill1 CVE
- 1,230.github.com/wneessen/go-mail1 CVE
- 1,231.github.com/wolfi-dev/wolfictl1 CVE
- 1,232.github.com/writefreely/writefreely1 CVE
- 1,233.github.com/xddxdd/bird-lg-go1 CVE
- 1,234.github.com/Xe/x1 CVE
- 1,235.github.com/Xhofe/alist1 CVE
- 1,236.github.com/xuri/excelize/v21 CVE
- 1,237.github.com/yaklang/yaklang1 CVE
- 1,238.github.com/ydb-platform/ydb-go-sdk/v31 CVE
- 1,239.github.com/yi-ge/unzip1 CVE
- 1,240.github.com/Yubico/yubihsm-connector1 CVE
- 1,241.github.com/yuin/goldmark1 CVE
- 1,242.github.com/yuin/goldmark/renderer/html1 CVE
- 1,243.github.com/yusing/godoxy1 CVE
- 1,244.github.com/zarf-dev/zarf1 CVE
- 1,245.github.com/zeromicro/go-zero1 CVE
- 1,246.github.com/zhaojh329/rttys1 CVE
- 1,247.github.com/zxh326/kite1 CVE
- 1,248.gitlab.com/uniget-org/cli1 CVE
- 1,249.goa.design/goa1 CVE
- 1,250.goa.design/goa/v31 CVE
Which Go packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Start Free Scan →