Go Package Vulnerabilities

All 1,476 Go modules with known CVEs, ranked by live CVE volume — 6,962 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,401.go.etcd.io/etcd/client/pkg/v31 CVE
  2. 1,402.go.etcd.io/etcd/client/v31 CVE
  3. 1,403.go-gitea/gitea1 CVE
  4. 1,404.golang.org/x/crypto/ssh/agent1 CVE
  5. 1,405.golang.org/x/oauth21 CVE
  6. 1,406.go.mongodb.org/mongo-driver/v21 CVE
  7. 1,407.google.golang.org/protobuf/encoding/protojson1 CVE
  8. 1,408.google.golang.org/protobuf/internal/encoding/json1 CVE
  9. 1,409.go.opentelemetry.io/collector/config/configgrpc1 CVE
  10. 1,410.go.opentelemetry.io/collector/config/confighttp1 CVE
  11. 1,411.go.opentelemetry.io/contrib/instrumentation/github.com/astaxie/beego/otelbeego1 CVE
  12. 1,412.go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful1 CVE
  13. 1,413.go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin1 CVE
  14. 1,414.go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux1 CVE
  15. 1,415.go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho1 CVE
  16. 1,416.go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc1 CVE
  17. 1,417.go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron1 CVE
  18. 1,418.go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace1 CVE
  19. 1,419.go.opentelemetry.io/ebpf-profiler1 CVE
  20. 1,420.go.opentelemetry.io/otel/baggage1 CVE
  21. 1,421.go.opentelemetry.io/otel/bridge/opentracing1 CVE
  22. 1,422.go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc1 CVE
  23. 1,423.go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp1 CVE
  24. 1,424.go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp1 CVE
  25. 1,425.go.opentelemetry.io/otel/exporters/otlp/otlptrace1 CVE
  26. 1,426.go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc1 CVE
  27. 1,427.go.opentelemetry.io/otel/exporters/zipkin1 CVE
  28. 1,428.go.opentelemetry.io/otel/propagation1 CVE
  29. 1,429.go.opentelemetry.io/otel/schema1 CVE
  30. 1,430.go.opentelemetry.io/otel/schema/v1.01 CVE
  31. 1,431.go.opentelemetry.io/otel/schema/v1.11 CVE
  32. 1,432.go.opentelemetry.io/otel/sdk/log1 CVE
  33. 1,433.go.pinniped.dev1 CVE
  34. 1,434.gopkg.in/go-jose/go-jose.v21 CVE
  35. 1,435.gopkg.in/macaron.v11 CVE
  36. 1,436.gopkg.in/square/go-jose.v21 CVE
  37. 1,437.gopkg.in/yaml.v31 CVE
  38. 1,438.go.probo.inc/probo1 CVE
  39. 1,439.go.qbee.io/transport1 CVE
  40. 1,440.go.temporal.io/api1 CVE
  41. 1,441.go.thethings.network/lorawan-stack1 CVE
  42. 1,442.go.thethings.network/lorawan-stack/v31 CVE
  43. 1,443.hatchet1 CVE
  44. 1,444.hatchet-dev/hatchet1 CVE
  45. 1,445.heckel.io/ntfy1 CVE
  46. 1,446.heckel.io/ntfy/v21 CVE
  47. 1,447.https://github.com/dadrus/heimdall1 CVE
  48. 1,448.https://github.com/filebrowser/filebrowser1 CVE
  49. 1,449.k8s.io/apiextensions-apiserver1 CVE
  50. 1,450.k8s.io/apimachinery1 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →