Go Package Vulnerabilities

All 1,476 Go modules with known CVEs, ranked by live CVE volume — 6,962 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,451.k8s.io/apiserver1 CVE
  2. 1,452.k8s.io/kops1 CVE
  3. 1,453.k8s.io/kubernetes/cmd/kube-apiserver1 CVE
  4. 1,454.k8s.io/kubernetes/cmd/kubelet1 CVE
  5. 1,455.k8s.io/kubernetes/pkg/kubelet1 CVE
  6. 1,456.k8s.io/kube-state-metrics1 CVE
  7. 1,457.k8s.io/minikube1 CVE
  8. 1,458.k8s.io/mount-utils1 CVE
  9. 1,459.knative.dev/pkg1 CVE
  10. 1,460.knative.dev/serving1 CVE
  11. 1,461.ktbs.dev/teler1 CVE
  12. 1,462.mellium.im/sasl1 CVE
  13. 1,463.mosn.io/mosn1 CVE
  14. 1,464.net/http1 CVE
  15. 1,465.oras.land/oras1 CVE
  16. 1,466.oras.land/oras-go1 CVE
  17. 1,467.pkg.jsn.cam/caddy-defender1 CVE
  18. 1,468.sftpgo1 CVE
  19. 1,469.sigs.k8s.io/aws-iam-authenticator1 CVE
  20. 1,470.sigs.k8s.io/azurefile-csi-driver1 CVE
  21. 1,471.sigs.k8s.io/secrets-store-sync-controller1 CVE
  22. 1,472.simonwaldherr.de/go/zplgfa1 CVE
  23. 1,473.siyuan1 CVE
  24. 1,474.tailscale.com/cmd1 CVE
  25. 1,475.teler.app1 CVE
  26. 1,476.zotregistry.io/zot1 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →