Go Package Vulnerabilities

All 1,476 Go modules with known CVEs, ranked by live CVE volume — 6,962 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 251.github.com/concourse/concourse5 CVEs
  2. 252.github.com/containers/libpod5 CVEs
  3. 253.github.com/corazawaf/coraza/v25 CVEs
  4. 254.github.com/distribution/distribution5 CVEs
  5. 255.github.com/fluxcd/kustomize-controller5 CVEs
  6. 256.github.com/free5gc/amf5 CVEs
  7. 257.github.com/free5gc/pcf5 CVEs
  8. 258.github.com/gin-gonic/gin5 CVEs
  9. 259.github.com/go-git/go-git/v45 CVEs
  10. 260.github.com/gogs/gogs5 CVEs
  11. 261.github.com/hashicorp/boundary5 CVEs
  12. 262.github.com/hashicorp/go-getter/v25 CVEs
  13. 263.github.com/IBAX-io/go-ibax5 CVEs
  14. 264.github.com/kiali/kiali5 CVEs
  15. 265.github.com/KubeOperator/kubepi5 CVEs
  16. 266.github.com/moby/moby/v25 CVEs
  17. 267.github.com/modelcontextprotocol/registry5 CVEs
  18. 268.github.com/nuclio/nuclio5 CVEs
  19. 269.github.com/openziti/zrok5 CVEs
  20. 270.github.com/openziti/zrok/v25 CVEs
  21. 271.github.com/owncast/owncast5 CVEs
  22. 272.github.com/pion/dtls5 CVEs
  23. 273.github.com/runatlantis/atlantis5 CVEs
  24. 274.github.com/russellhaering/goxmldsig5 CVEs
  25. 275.github.com/sigstore/rekor5 CVEs
  26. 276.github.com/snapcore/snapd5 CVEs
  27. 277.github.com/SpectoLabs/hoverfly5 CVEs
  28. 278.github.com/t2bot/matrix-media-repo5 CVEs
  29. 279.github.com/tomwright/dasel5 CVEs
  30. 280.github.com/tomwright/dasel/v25 CVEs
  31. 281.github.com/tomwright/dasel/v35 CVEs
  32. 282.github.com/treeverse/lakefs5 CVEs
  33. 283.golang.org/x/text5 CVEs
  34. 284.miniflux.app5 CVEs
  35. 285.zotregistry.dev/zot5 CVEs
  36. 286.github.com/0xJacky/nginx-ui4 CVEs
  37. 287.github.com/apache/thrift4 CVEs
  38. 288.github.com/apptainer/apptainer4 CVEs
  39. 289.github.com/arduino/arduino-create-agent4 CVEs
  40. 290.github.com/authelia/authelia4 CVEs
  41. 291.github.com/bnb-chain/tss-lib4 CVEs
  42. 292.github.com/chaos-mesh/chaos-mesh4 CVEs
  43. 293.github.com/corazawaf/coraza4 CVEs
  44. 294.github.com/cortexproject/cortex4 CVEs
  45. 295.github.com/crewjam/saml4 CVEs
  46. 296.github.com/daytonaio/daytona4 CVEs
  47. 297.github.com/dexidp/dex4 CVEs
  48. 298.github.com/dhowden/tag4 CVEs
  49. 299.github.com/distribution/distribution/v34 CVEs
  50. 300.github.com/dunglas/frankenphp4 CVEs

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →