Go Package Vulnerabilities

All 1,495 Go modules with known CVEs, ranked by live CVE volume — 7,089 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 701.github.com/altcha-org/altcha-lib-go1 CVE
  2. 702.github.com/anchore/grype1 CVE
  3. 703.github.com/anchore/stereoscope1 CVE
  4. 704.github.com/andreimarcu/linx-server1 CVE
  5. 705.github.com/AndrewBurian/powermux1 CVE
  6. 706.github.com/andybalholm/brotli1 CVE
  7. 707.github.com/Anipaleja/nginx-defender1 CVE
  8. 708.github.com/antchfx/xmlquery1 CVE
  9. 709.github.com/antchfx/xpath1 CVE
  10. 710.github.com/anyproto/anytype-cli1 CVE
  11. 711.github.com/anyproto/anytype-heart1 CVE
  12. 712.github.com/apache/age/drivers/golang1 CVE
  13. 713.github.com/apache/camel-k1 CVE
  14. 714.github.com/apache/camel-k/v21 CVE
  15. 715.github.com/apache/skywalking-mcp1 CVE
  16. 716.github.com/apache/solr-operator1 CVE
  17. 717.github.com/appc/docker2aci1 CVE
  18. 718.github.com/appleboy/gorush1 CVE
  19. 719.github.com/aquaproj/aqua1 CVE
  20. 720.github.com/aquaproj/aqua/v21 CVE
  21. 721.github.com/argoproj/argo-cd/v2/server1 CVE
  22. 722.github.com/arkmq-org/activemq-artemis-operator1 CVE
  23. 723.github.com/artdarek/go-unzip1 CVE
  24. 724.github.com/autobrr/qui1 CVE
  25. 725.github.com/aws/amazon-cloudwatch-agent1 CVE
  26. 726.github.com/aws/amazon-s3-encryption-client-go1 CVE
  27. 727.github.com/aws/amazon-s3-encryption-client-go/v31 CVE
  28. 728.github.com/aws/amazon-s3-encryption-client-go/v41 CVE
  29. 729.github.com/aws/aws-advanced-go-wrapper/auth-helpers1 CVE
  30. 730.github.com/aws/aws-advanced-go-wrapper/aws-secrets-manager1 CVE
  31. 731.github.com/aws/aws-advanced-go-wrapper/awssql1 CVE
  32. 732.github.com/aws/aws-advanced-go-wrapper/awssql/v21 CVE
  33. 733.github.com/aws/aws-advanced-go-wrapper/custom-endpoint1 CVE
  34. 734.github.com/aws/aws-advanced-go-wrapper/federated-auth1 CVE
  35. 735.github.com/aws/aws-advanced-go-wrapper/iam1 CVE
  36. 736.github.com/aws/aws-advanced-go-wrapper/mysql-driver1 CVE
  37. 737.github.com/aws/aws-advanced-go-wrapper/okta1 CVE
  38. 738.github.com/aws/aws-advanced-go-wrapper/otlp1 CVE
  39. 739.github.com/aws/aws-advanced-go-wrapper/pgx-driver1 CVE
  40. 740.github.com/aws/aws-advanced-go-wrapper/xray1 CVE
  41. 741.github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream1 CVE
  42. 742.github.com/aws/aws-sdk-go-v2/service/bedrockagentcore1 CVE
  43. 743.github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime1 CVE
  44. 744.github.com/aws/aws-sdk-go-v2/service/bedrockruntime1 CVE
  45. 745.github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs1 CVE
  46. 746.github.com/aws/aws-sdk-go-v2/service/iotsitewise1 CVE
  47. 747.github.com/aws/aws-sdk-go-v2/service/kinesis1 CVE
  48. 748.github.com/aws/aws-sdk-go-v2/service/lambda1 CVE
  49. 749.github.com/aws/aws-sdk-go-v2/service/lexruntimev21 CVE
  50. 750.github.com/aws/aws-sdk-go-v2/service/s31 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →