Go Package Vulnerabilities

All 1,495 Go modules with known CVEs, ranked by live CVE volume — 7,089 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 751.github.com/aws/aws-sdk-go-v2/service/sagemakerruntime1 CVE
  2. 752.github.com/aws/aws-sdk-go-v2/service/transcribestreaming1 CVE
  3. 753.github.com/awslabs/aws-alb-route-directive-adapter-for-istio1 CVE
  4. 754.github.com/Azure/aad-pod-identity1 CVE
  5. 755.github.com/Azure/azure-sdk-for-go/sdk/azidentity1 CVE
  6. 756.github.com/Azure/go-ntlmssp1 CVE
  7. 757.github.com/Azure/secrets-store-csi-driver-provider-azure1 CVE
  8. 758.github.com/b3log/wide1 CVE
  9. 759.github.com/bablilayoub/openhole1 CVE
  10. 760.github.com/bank-vaults/vault-secrets-webhook1 CVE
  11. 761.github.com/bazelbuild/intellij1 CVE
  12. 762.github.com/benc-uk/kubeview1 CVE
  13. 763.github.com/bettercap/bettercap1 CVE
  14. 764.github.com/biscuit-auth/biscuit-go1 CVE
  15. 765.github.com/BishopFox/joro1 CVE
  16. 766.github.com/bitnami-labs/sealed-secrets1 CVE
  17. 767.github.com/bits-and-blooms/bloom1 CVE
  18. 768.github.com/blevesearch/bleve1 CVE
  19. 769.github.com/blevesearch/bleve/v21 CVE
  20. 770.github.com/bpg/terraform-provider-proxmox1 CVE
  21. 771.github.com/bradleyfalzon/ghinstallation1 CVE
  22. 772.github.com/briansmith/ring1 CVE
  23. 773.github.com/btcsuite/go-socks1 CVE
  24. 774.github.com/btcsuitereleases/go-socks1 CVE
  25. 775.github.com/buildkite/elastic-ci-stack-for-aws1 CVE
  26. 776.github.com/buildkite/elastic-ci-stack-for-aws/v51 CVE
  27. 777.github.com/bunkerity/bunkerweb1 CVE
  28. 778.github.com/bytom/bytom1 CVE
  29. 779.github.com/ca17/teamsacs1 CVE
  30. 780.github.com/caddyserver/caddy/v2/modules/caddyhttp1 CVE
  31. 781.github.com/caddyserver/caddy/v2/modules/caddyhttp/reverseproxy1 CVE
  32. 782.github.com/candid82/joker1 CVE
  33. 783.github.com/canonical/authd1 CVE
  34. 784.github.com/canonical/microceph/microceph1 CVE
  35. 785.github.com/canonical/pebble1 CVE
  36. 786.github.com/carina-io/carina1 CVE
  37. 787.github.com/ccfos/nightingale1 CVE
  38. 788.github.com/ccfos/nightingale/v41 CVE
  39. 789.github.com/ccfos/nightingale/v51 CVE
  40. 790.github.com/ccfos/nightingale/v61 CVE
  41. 791.github.com/cea-hpc/sshproxy1 CVE
  42. 792.github.com/chai2010/webp1 CVE
  43. 793.github.com/chainguard-dev/bincapz1 CVE
  44. 794.github.com/chaosblade-io/chaosblade1 CVE
  45. 795.github.com/charmbracelet/charm1 CVE
  46. 796.github.com/charmbracelet/wish1 CVE
  47. 797.github.com/cilium/ciliumCilium1 CVE
  48. 798.github.com/cilium/cilium-cli1 CVE
  49. 799.github.com/cilium/ebpf1 CVE
  50. 800.github.com/cilium/hubble1 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →