Go Package Vulnerabilities

All 1,495 Go modules with known CVEs, ranked by live CVE volume — 7,089 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 651.github.com/tobychui/zoraxy2 CVEs
  2. 652.github.com/umputun/remark422 CVEs
  3. 653.github.com/unknwon/cae2 CVEs
  4. 654.github.com/u-root/u-root2 CVEs
  5. 655.github.com/vesoft-inc/nebula2 CVEs
  6. 656.github.com/VictoriaMetrics/VictoriaMetrics2 CVEs
  7. 657.github.com/yoanbernabeu/grepai2 CVEs
  8. 658.github.com/yokecd/yoke2 CVEs
  9. 659.github.com/zarf-dev/zarf2 CVEs
  10. 660.github.com/zinclabs/zinc2 CVEs
  11. 661.github.com/zincsearch/zincsearch2 CVEs
  12. 662.go.etcd.io/etcd/server/v32 CVEs
  13. 663.golang.org/x/mod2 CVEs
  14. 664.golang.org/x/net/html2 CVEs
  15. 665.golang.org/x/sys2 CVEs
  16. 666.go.mongodb.org/mongo-driver2 CVEs
  17. 667.google.golang.org/protobuf2 CVEs
  18. 668.go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp2 CVEs
  19. 669.go.opentelemetry.io/otel2 CVEs
  20. 670.go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp2 CVEs
  21. 671.gopkg.in/square/go-jose.v12 CVEs
  22. 672.go.podman.io/podman/v62 CVEs
  23. 673.go.woodpecker-ci.org/woodpecker/v32 CVEs
  24. 674.mellium.im/xmpp2 CVEs
  25. 675.Nginx-UI2 CVEs
  26. 676.open-cluster-management.io/ocm2 CVEs
  27. 677.sigs.k8s.io/secrets-store-csi-driver2 CVEs
  28. 678.zotregistry.dev/zot/v22 CVEs
  29. 679.aahframe.work1 CVE
  30. 680.blitiri.com.ar/go/chasquid1 CVE
  31. 681.charm.land/wish/v21 CVE
  32. 682.code.cloudfoundry.org/archiver1 CVE
  33. 683.code.cloudfoundry.org/gorouter1 CVE
  34. 684.code.vegaprotocol.io/vega1 CVE
  35. 685.ehang.io/nps1 CVE
  36. 686.filippo.io/edwards255191 CVE
  37. 687.filippo.io/nistec1 CVE
  38. 688.gardener/gardener1 CVE
  39. 689.gitea.com/gitea/runner1 CVE
  40. 690.github.com/1Panel-dev/1Panel/agent1 CVE
  41. 691.github.com/3scale-sre/marin3r1 CVE
  42. 692.github.com/abhinavxd/libredesk1 CVE
  43. 693.github.com/actiontech/sqle1 CVE
  44. 694.github.com/AdguardTeam/dnsproxy1 CVE
  45. 695.github.com/agentgateway/agentgateway1 CVE
  46. 696.github.com/agnivade/easy-scrypt1 CVE
  47. 697.github.com/aiven/aiven-operator1 CVE
  48. 698.github.com/albertito/chasquid1 CVE
  49. 699.github.com/alexanderzobnin/grafana-zabbix1 CVE
  50. 700.github.com/alexandre-daubois/ember1 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →