Go Package Vulnerabilities

All 1,495 Go modules with known CVEs, ranked by live CVE volume — 7,089 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 601.github.com/mholt/archiver/v32 CVEs
  2. 602.github.com/microcosm-cc/bluemonday2 CVEs
  3. 603.github.com/minio/console2 CVEs
  4. 604.github.com/moov-io/signedxml2 CVEs
  5. 605.github.com/multiversx/mx-chain-go2 CVEs
  6. 606.github.com/naiba/nezha2 CVEs
  7. 607.github.com/ncw/rclone2 CVEs
  8. 608.github.com/netbirdio/netbird2 CVEs
  9. 609.github.com/NVIDIA/gpu-operator2 CVEs
  10. 610.github.com/NVIDIA/k8s-device-plugin2 CVEs
  11. 611.github.com/NVIDIA/mig-parted2 CVEs
  12. 612.github.com/oam-dev/kubevela2 CVEs
  13. 613.github.com/octo-sts/app2 CVEs
  14. 614.github.com/opencontainers/selinux2 CVEs
  15. 615.github.com/open-feature/open-feature-operator2 CVEs
  16. 616.github.com/openkruise/kruise2 CVEs
  17. 617.github.com/openshift/apiserver-library-go2 CVEs
  18. 618.github.com/openshift-pipelines/pipelines-as-code2 CVEs
  19. 619.github.com/ory/kratos2 CVEs
  20. 620.github.com/oxyno-zeta/s3-proxy2 CVEs
  21. 621.github.com/peterzen/goresolver2 CVEs
  22. 622.github.com/pion/dtls/v32 CVEs
  23. 623.github.com/pires/go-proxyproto2 CVEs
  24. 624.github.com/projectcapsule/capsule-proxy2 CVEs
  25. 625.github.com/projectdiscovery/interactsh2 CVEs
  26. 626.github.com/protocolbuffers/protobuf2 CVEs
  27. 627.github.com/rancher/local-path-provisioner2 CVEs
  28. 628.github.com/rancher/steve2 CVEs
  29. 629.github.com/rancher/wrangler2 CVEs
  30. 630.github.com/redhat-developer/gitops-operator2 CVEs
  31. 631.github.com/refraction-networking/utls2 CVEs
  32. 632.github.com/regclient/regclient2 CVEs
  33. 633.github.com/RobotsAndPencils/go-saml2 CVEs
  34. 634.github.com/rs/cors2 CVEs
  35. 635.github.com/sajari/docconv2 CVEs
  36. 636.github.com/sap/cloud-security-client-go2 CVEs
  37. 637.github.com/shamaton/msgpack/v22 CVEs
  38. 638.github.com/sipeed/picoclaw2 CVEs
  39. 639.github.com/siyuan-note/siyuan2 CVEs
  40. 640.github.com/slackhq/nebula2 CVEs
  41. 641.github.com/songquanpeng/one-api2 CVEs
  42. 642.github.com/stefanprodan/podinfo2 CVEs
  43. 643.github.com/stripe/smokescreen2 CVEs
  44. 644.github.com/stripe/stripe-cli2 CVEs
  45. 645.github.com/swaggo/http-swagger2 CVEs
  46. 646.github.com/sylabs/singularity/v42 CVEs
  47. 647.github.com/talos-systems/talos2 CVEs
  48. 648.github.com/TecharoHQ/anubis2 CVEs
  49. 649.github.com/tharsis/evmos/v22 CVEs
  50. 650.github.com/tiagorlampert/CHAOS2 CVEs

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →