Go Package Vulnerabilities
All 1,476 Go modules with known CVEs, ranked by live CVE volume — 6,962 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 1,201.github.com/opencontainers/umoci1 CVE
- 1,202.github.com/opencost/opencost1 CVE
- 1,203.github.com/open-falcon/falcon-plus1 CVE
- 1,204.github.com/open-feature/flagd/flagd1 CVE
- 1,205.github.com/openflagr/flagr1 CVE
- 1,206.github.com/openmeterio/openmeter1 CVE
- 1,207.github.com/open-policy-agent/opa-envoy-plugin1 CVE
- 1,208.github.com/open-policy-agent/opa/server1 CVE
- 1,209.github.com/open-policy-agent/opa/v1/server1 CVE
- 1,210.github.com/openpubkey/openpubkey1 CVE
- 1,211.github.com/openpubkey/opkssh1 CVE
- 1,212.github.com/openrundev/openrun1 CVE
- 1,213.github.com/openshift/assisted-installer1 CVE
- 1,214.github.com/openshift/builder1 CVE
- 1,215.github.com/openshift/cluster-logging-operator1 CVE
- 1,216.github.com/openshift/cluster-monitoring-operator1 CVE
- 1,217.github.com/openshift/must-gather1 CVE
- 1,218.github.com/openshift/openshift-apiserver1 CVE
- 1,219.github.com/openshift/openshift-controller-manager1 CVE
- 1,220.github.com/openshift/osin1 CVE
- 1,221.github.com/openshift/source-to-image1 CVE
- 1,222.github.com/openshift/telemeter1 CVE
- 1,223.github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter1 CVE
- 1,224.github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension1 CVE
- 1,225.github.com/open-telemetry/opentelemetry-collector-contrib/extension/bearertokenauthextension1 CVE
- 1,226.github.com/open-telemetry/opentelemetry-collector-contrib/receiver/awsfirehosereceiver1 CVE
- 1,227.github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver1 CVE
- 1,228.github.com/open-telemetry/opentelemetry-operator1 CVE
- 1,229.github.com/operator-framework/operator-sdk1 CVE
- 1,230.github.com/orneryd/nornicdb1 CVE
- 1,231.github.com/ory/hydra/v21 CVE
- 1,232.github.com/ory/keto1 CVE
- 1,233.github.com/ossf/allstar1 CVE
- 1,234.github.com/ouqiang/gocron1 CVE
- 1,235.github.com/ovn-org/ovn-kubernetes1 CVE
- 1,236.github.com/oxyno-zeta/s3-proxy/cmd/s3-proxy1 CVE
- 1,237.github.com/pandatix/go-cvss1 CVE
- 1,238.github.com/pelicanplatform/pelican1 CVE
- 1,239.github.com/phires/go-guerrilla1 CVE
- 1,240.github.com/pilinux/gorest1 CVE
- 1,241.github.com/pion/interceptor1 CVE
- 1,242.github.com/pion/stun1 CVE
- 1,243.github.com/pion/stun/v21 CVE
- 1,244.github.com/pion/stun/v31 CVE
- 1,245.github.com/pion/webrtc/v31 CVE
- 1,246.github.com/pipe-cd/pipecd1 CVE
- 1,247.github.com/piraeusdatastore/piraeus-operator1 CVE
- 1,248.github.com/piraeusdatastore/piraeus-operator/v21 CVE
- 1,249.github.com/play-with-docker/play-with-docker1 CVE
- 1,250.github.com/prasmussen/glot-code-runner1 CVE
Which Go packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Book a Demo →