Go Package Vulnerabilities

All 1,330 Go modules with known CVEs, ranked by live CVE volume — 5,717 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,301.go.thethings.network/lorawan-stack1 CVE
  2. 1,302.go.thethings.network/lorawan-stack/v31 CVE
  3. 1,303.heckel.io/ntfy1 CVE
  4. 1,304.heckel.io/ntfy/v21 CVE
  5. 1,305.https://github.com/dadrus/heimdall1 CVE
  6. 1,306.k8s.io/apiextensions-apiserver1 CVE
  7. 1,307.k8s.io/apimachinery1 CVE
  8. 1,308.k8s.io/apiserver1 CVE
  9. 1,309.k8s.io/kops1 CVE
  10. 1,310.k8s.io/kubernetes/cmd/kube-apiserver1 CVE
  11. 1,311.k8s.io/kubernetes/cmd/kubelet1 CVE
  12. 1,312.k8s.io/kubernetes/pkg/kubelet1 CVE
  13. 1,313.k8s.io/kube-state-metrics1 CVE
  14. 1,314.k8s.io/minikube1 CVE
  15. 1,315.k8s.io/mount-utils1 CVE
  16. 1,316.knative.dev/serving1 CVE
  17. 1,317.ktbs.dev/teler1 CVE
  18. 1,318.mellium.im/sasl1 CVE
  19. 1,319.mosn.io/mosn1 CVE
  20. 1,320.net/http1 CVE
  21. 1,321.oras.land/oras-go1 CVE
  22. 1,322.pkg.jsn.cam/caddy-defender1 CVE
  23. 1,323.sftpgo1 CVE
  24. 1,324.sigs.k8s.io/aws-iam-authenticator1 CVE
  25. 1,325.sigs.k8s.io/azurefile-csi-driver1 CVE
  26. 1,326.sigs.k8s.io/secrets-store-sync-controller1 CVE
  27. 1,327.simonwaldherr.de/go/zplgfa1 CVE
  28. 1,328.tailscale.com/cmd1 CVE
  29. 1,329.teler.app1 CVE
  30. 1,330.zotregistry.io/zot1 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →