Go Package Vulnerabilities

All 1,495 Go modules with known CVEs, ranked by live CVE volume — 7,089 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 551.github.com/google/exposure-notifications-verification-server2 CVEs
  2. 552.github.com/google/go-attestation2 CVEs
  3. 553.github.com/google/osv-scalibr2 CVEs
  4. 554.github.com/gorilla/csrf2 CVEs
  5. 555.github.com/gotify/server2 CVEs
  6. 556.github.com/gotify/server/v22 CVEs
  7. 557.github.com/go-vela/worker2 CVEs
  8. 558.github.com/go-yaml/yaml2 CVEs
  9. 559.github.com/gphper/ginadmin2 CVEs
  10. 560.github.com/grafana/agent2 CVEs
  11. 561.github.com/grafana/loki2 CVEs
  12. 562.github.com/grafana/tempo-operator2 CVEs
  13. 563.github.com/gravitational/teleport2 CVEs
  14. 564.github.com/gruntwork-io/terragrunt2 CVEs
  15. 565.github.com/hashicorp/go-slug2 CVEs
  16. 566.github.com/hashicorp/terraform2 CVEs
  17. 567.github.com/henrygd/beszel2 CVEs
  18. 568.github.com/influxdata/influxdb2 CVEs
  19. 569.github.com/infracost/infracost2 CVEs
  20. 570.github.com/iskorotkov/avro/v22 CVEs
  21. 571.github.com/jackc/pgproto3/v22 CVEs
  22. 572.github.com/jandedobbeleer/oh-my-posh2 CVEs
  23. 573.github.com/jm33-m0/emp3r0r/core2 CVEs
  24. 574.github.com/jmpsec/osctrl2 CVEs
  25. 575.github.com/jpillora/chisel2 CVEs
  26. 576.github.com/jumpserver/koko2 CVEs
  27. 577.github.com/justinas/nosurf2 CVEs
  28. 578.github.com/kata-containers/runtime2 CVEs
  29. 579.github.com/kitabisa/teler-waf2 CVEs
  30. 580.github.com/klauspost/compress2 CVEs
  31. 581.github.com/kuadrant/authorino2 CVEs
  32. 582.github.com/kubernetes-sigs/aws-efs-csi-driver2 CVEs
  33. 583.github.com/kubernetes-sigs/image-builder2 CVEs
  34. 584.github.com/kubev2v/assisted-migration-agent2 CVEs
  35. 585.github.com/kubevirt/kubevirt2 CVEs
  36. 586.github.com/l3montree-dev/devguard2 CVEs
  37. 587.github.com/labring/sealos2 CVEs
  38. 588.github.com/lima-vm/lima2 CVEs
  39. 589.github.com/linkerd/linkerd22 CVEs
  40. 590.github.com/loft-sh/devspace2 CVEs
  41. 591.github.com/lxc/lxd2 CVEs
  42. 592.github.com/m1k1o/neko/server2 CVEs
  43. 593.github.com/magma/magma2 CVEs
  44. 594.github.com/matrix-org/dendrite2 CVEs
  45. 595.github.com/matrix-org/gomatrixserverlib2 CVEs
  46. 596.github.com/mattermost/focalboard2 CVEs
  47. 597.github.com/mattermost/mattermost-plugin-boards2 CVEs
  48. 598.github.com/mattermost/mattermost-plugin-zoom2 CVEs
  49. 599.github.com/mattermost/mattermost/v52 CVEs
  50. 600.github.com/metal3-io/baremetal-operator2 CVEs

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →