Go Package Vulnerabilities

All 1,476 Go modules with known CVEs, ranked by live CVE volume — 6,962 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,351.github.com/trufflesecurity/trufflehog/v31 CVE
  2. 1,352.github.com/tursodatabase/turso-cli1 CVE
  3. 1,353.github.com/turt2live/matrix-media-repo1 CVE
  4. 1,354.github.com/txthinking/brook1 CVE
  5. 1,355.github.com/tyktechnologies/tyk-identity-broker1 CVE
  6. 1,356.github.com/TykTechnologies/tyk-identity-broker1 CVE
  7. 1,357.github.com/uber/kraken1 CVE
  8. 1,358.github.com/ubuntu/adsys1 CVE
  9. 1,359.github.com/umputun/remark421 CVE
  10. 1,360.github.com/Unstructured-IO/unstructured1 CVE
  11. 1,361.github.com/uozi-tech/cosy1 CVE
  12. 1,362.github.com/updatecli/updatecli1 CVE
  13. 1,363.github.com/uptrace/bun/driver/pgdriver1 CVE
  14. 1,364.github.com/u-root/u-root/pkg/cpio1 CVE
  15. 1,365.github.com/v2fly/v2ray-core1 CVE
  16. 1,366.github.com/v2fly/v2ray-core/v41 CVE
  17. 1,367.github.com/valyala/fasthttp1 CVE
  18. 1,368.github.com/vbatts/tar-split1 CVE
  19. 1,369.github.com/vektah/gqlparser1 CVE
  20. 1,370.github.com/vektah/gqlparser/v21 CVE
  21. 1,371.github.com/vitessio/vitess1 CVE
  22. 1,372.github.com/vmware-tanzu/velero1 CVE
  23. 1,373.github.com/volcano-sh/volcano1 CVE
  24. 1,374.github.com/vouch/vouch-proxy1 CVE
  25. 1,375.github.com/wal-g/wal-g1 CVE
  26. 1,376.github.com/weaveworks/tf-controller1 CVE
  27. 1,377.github.com/weaveworks/weave1 CVE
  28. 1,378.github.com/whilp/git-urls1 CVE
  29. 1,379.github.com/whyrusleeping/tar-utils1 CVE
  30. 1,380.github.com/windmill-labs/windmill1 CVE
  31. 1,381.github.com/wneessen/go-mail1 CVE
  32. 1,382.github.com/wolfi-dev/wolfictl1 CVE
  33. 1,383.github.com/writefreely/writefreely1 CVE
  34. 1,384.github.com/xddxdd/bird-lg-go1 CVE
  35. 1,385.github.com/Xe/x1 CVE
  36. 1,386.github.com/Xhofe/alist1 CVE
  37. 1,387.github.com/yaklang/yaklang1 CVE
  38. 1,388.github.com/ydb-platform/ydb-go-sdk/v31 CVE
  39. 1,389.github.com/yi-ge/unzip1 CVE
  40. 1,390.github.com/Yubico/yubihsm-connector1 CVE
  41. 1,391.github.com/yuin/goldmark1 CVE
  42. 1,392.github.com/yuin/goldmark/renderer/html1 CVE
  43. 1,393.github.com/yusing/godoxy1 CVE
  44. 1,394.github.com/zarf-dev/zarf/src/pkg/archive1 CVE
  45. 1,395.github.com/zeromicro/go-zero1 CVE
  46. 1,396.github.com/zhaojh329/rttys1 CVE
  47. 1,397.github.com/zxh326/kite1 CVE
  48. 1,398.goa.design/goa1 CVE
  49. 1,399.goa.design/goa/v31 CVE
  50. 1,400.go.elastic.co/apm1 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →