Go Package Vulnerabilities

All 1,476 Go modules with known CVEs, ranked by live CVE volume — 6,962 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 301.github.com/fleetdm/fleet4 CVEs
  2. 302.github.com/flipped-aurora/gin-vue-admin4 CVEs
  3. 303.github.com/foxcpp/maddy4 CVEs
  4. 304.github.com/free5gc/ausf4 CVEs
  5. 305.github.com/gomarkdown/markdown4 CVEs
  6. 306.github.com/google/fscrypt4 CVEs
  7. 307.github.com/hahwul/dalfox4 CVEs
  8. 308.github.com/hahwul/dalfox/v24 CVEs
  9. 309.github.com/hashicorp/go-getter/gcs/v24 CVEs
  10. 310.github.com/hashicorp/go-getter/s3/v24 CVEs
  11. 311.github.com/IceWhaleTech/CasaOS-UserService4 CVEs
  12. 312.github.com/inspektor-gadget/inspektor-gadget4 CVEs
  13. 313.github.com/jackc/pgx/v54 CVEs
  14. 314.github.com/julien040/anyquery4 CVEs
  15. 315.github.com/knadh/listmonk4 CVEs
  16. 316.github.com/kubev2v/migration-planner4 CVEs
  17. 317.github.com/kubewarden/kubewarden-controller4 CVEs
  18. 318.github.com/layer5io/meshery4 CVEs
  19. 319.github.com/lightningnetwork/lnd4 CVEs
  20. 320.github.com/lin-snow/Ech04 CVEs
  21. 321.github.com/mattermost/mattermost-plugin-github4 CVEs
  22. 322.github.com/mattermost/mattermost-plugin-msteams4 CVEs
  23. 323.github.com/mholt/archiver4 CVEs
  24. 324.github.com/nhost/nhost4 CVEs
  25. 325.github.com/notaryproject/notation-go4 CVEs
  26. 326.github.com/NVIDIA/nvidia-container-toolkit4 CVEs
  27. 327.github.com/obot-platform/obot4 CVEs
  28. 328.github.com/openshift/console4 CVEs
  29. 329.github.com/ory/fosite4 CVEs
  30. 330.github.com/ory/oathkeeper4 CVEs
  31. 331.github.com/oxia-db/oxia4 CVEs
  32. 332.github.com/pion/dtls/v24 CVEs
  33. 333.github.com/pocket-id/pocket-id/backend4 CVEs
  34. 334.github.com/quic-go/webtransport-go4 CVEs
  35. 335.github.com/russellhaering/gosaml24 CVEs
  36. 336.github.com/shellhub-io/shellhub4 CVEs
  37. 337.github.com/sigstore/gitsign4 CVEs
  38. 338.github.com/smallstep/certificates4 CVEs
  39. 339.github.com/steveiliop56/tinyauth4 CVEs
  40. 340.github.com/tendermint/tendermint4 CVEs
  41. 341.github.com/theupdateframework/go-tuf/v24 CVEs
  42. 342.github.com/tidwall/gjson4 CVEs
  43. 343.github.com/weaviate/weaviate4 CVEs
  44. 344.golang.org/x/net/http24 CVEs
  45. 345.google.golang.org/grpc4 CVEs
  46. 346.go.opentelemetry.io/otel/sdk4 CVEs
  47. 347.gopkg.in/src-d/go-git.v44 CVEs
  48. 348.go.woodpecker-ci.org/woodpecker4 CVEs
  49. 349.go.woodpecker-ci.org/woodpecker/v24 CVEs
  50. 350.Traefik4 CVEs

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →