Go Package Vulnerabilities

All 1,476 Go modules with known CVEs, ranked by live CVE volume — 6,962 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 401.github.com/jackc/pgx/v43 CVEs
  2. 402.github.com/k3s-io/k3s3 CVEs
  3. 403.github.com/karmada-io/karmada3 CVEs
  4. 404.github.com/kata-containers/kata-containers3 CVEs
  5. 405.github.com/kcp-dev/kcp3 CVEs
  6. 406.github.com/kedacore/keda3 CVEs
  7. 407.github.com/kedacore/keda/v23 CVEs
  8. 408.github.com/kubeflow/pipelines3 CVEs
  9. 409.github.com/lestrrat-go/jwx3 CVEs
  10. 410.github.com/lestrrat-go/jwx/v23 CVEs
  11. 411.github.com/libp2p/go-libp2p3 CVEs
  12. 412.github.com/lucasdillmann/nginx-ignition3 CVEs
  13. 413.github.com/mattermost/mattermost-plugin-calls3 CVEs
  14. 414.github.com/mattermost/mattermost-plugin-jira3 CVEs
  15. 415.github.com/mickael-kerjean/filestash3 CVEs
  16. 416.github.com/miekg/dns3 CVEs
  17. 417.github.com/milvus-io/milvus3 CVEs
  18. 418.github.com/modelcontextprotocol/go-sdk3 CVEs
  19. 419.github.com/monetr/monetr3 CVEs
  20. 420.github.com/mudler/LocalAI3 CVEs
  21. 421.github.com/nats-io/jwt3 CVEs
  22. 422.github.com/nats-io/nats-streaming-server3 CVEs
  23. 423.github.com/nektos/act3 CVEs
  24. 424.github.com/notaryproject/notation3 CVEs
  25. 425.github.com/openclaw/crabbox3 CVEs
  26. 426.github.com/openshift/hive3 CVEs
  27. 427.github.com/openshift/origin3 CVEs
  28. 428.github.com/opentofu/opentofu3 CVEs
  29. 429.github.com/ory/hydra3 CVEs
  30. 430.github.com/perses/perses3 CVEs
  31. 431.github.com/phachon/mm-wiki3 CVEs
  32. 432.github.com/pinchtab/pinchtab/cmd/pinchtab3 CVEs
  33. 433.github.com/pingcap/tidb3 CVEs
  34. 434.github.com/plentico/plenti3 CVEs
  35. 435.github.com/pocketbase/pocketbase3 CVEs
  36. 436.github.com/projectcalico/calico/v33 CVEs
  37. 437.github.com/projectcontour/contour3 CVEs
  38. 438.github.com/pydio/cells3 CVEs
  39. 439.github.com/pydio/cells/v43 CVEs
  40. 440.github.com/semaphoreui/semaphore3 CVEs
  41. 441.github.com/sigstore/cosign/v33 CVEs
  42. 442.github.com/sigstore/fulcio3 CVEs
  43. 443.github.com/sigstore/sigstore-go3 CVEs
  44. 444.github.com/sigstore/timestamp-authority3 CVEs
  45. 445.github.com/sigstore/timestamp-authority/v23 CVEs
  46. 446.github.com/sipcapture/homer-app3 CVEs
  47. 447.github.com/snowflakedb/gosnowflake3 CVEs
  48. 448.github.com/sonirico/mcp-shell3 CVEs
  49. 449.github.com/square/go-jose3 CVEs
  50. 450.github.com/stacklok/toolhive3 CVEs

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →