Go Package Vulnerabilities

All 1,495 Go modules with known CVEs, ranked by live CVE volume — 7,089 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,451.go.opentelemetry.io/otel/sdk/log1 CVE
  2. 1,452.go.pinniped.dev1 CVE
  3. 1,453.gopkg.in/go-jose/go-jose.v21 CVE
  4. 1,454.gopkg.in/macaron.v11 CVE
  5. 1,455.gopkg.in/square/go-jose.v21 CVE
  6. 1,456.gopkg.in/yaml.v31 CVE
  7. 1,457.go.probo.inc/probo1 CVE
  8. 1,458.go.qbee.io/transport1 CVE
  9. 1,459.go.temporal.io/api1 CVE
  10. 1,460.go.thethings.network/lorawan-stack1 CVE
  11. 1,461.go.thethings.network/lorawan-stack/v31 CVE
  12. 1,462.hatchet1 CVE
  13. 1,463.hatchet-dev/hatchet1 CVE
  14. 1,464.heckel.io/ntfy1 CVE
  15. 1,465.heckel.io/ntfy/v21 CVE
  16. 1,466.https://github.com/dadrus/heimdall1 CVE
  17. 1,467.https://github.com/filebrowser/filebrowser1 CVE
  18. 1,468.k8s.io/apiextensions-apiserver1 CVE
  19. 1,469.k8s.io/apimachinery1 CVE
  20. 1,470.k8s.io/apiserver1 CVE
  21. 1,471.k8s.io/kops1 CVE
  22. 1,472.k8s.io/kubernetes/cmd/kube-apiserver1 CVE
  23. 1,473.k8s.io/kubernetes/cmd/kubelet1 CVE
  24. 1,474.k8s.io/kubernetes/pkg/kubelet1 CVE
  25. 1,475.k8s.io/kube-state-metrics1 CVE
  26. 1,476.k8s.io/minikube1 CVE
  27. 1,477.k8s.io/mount-utils1 CVE
  28. 1,478.knative.dev/pkg1 CVE
  29. 1,479.knative.dev/serving1 CVE
  30. 1,480.ktbs.dev/teler1 CVE
  31. 1,481.mellium.im/sasl1 CVE
  32. 1,482.mosn.io/mosn1 CVE
  33. 1,483.net/http1 CVE
  34. 1,484.oras.land/oras1 CVE
  35. 1,485.oras.land/oras-go1 CVE
  36. 1,486.pkg.jsn.cam/caddy-defender1 CVE
  37. 1,487.sftpgo1 CVE
  38. 1,488.sigs.k8s.io/aws-iam-authenticator1 CVE
  39. 1,489.sigs.k8s.io/azurefile-csi-driver1 CVE
  40. 1,490.sigs.k8s.io/secrets-store-sync-controller1 CVE
  41. 1,491.simonwaldherr.de/go/zplgfa1 CVE
  42. 1,492.siyuan1 CVE
  43. 1,493.tailscale.com/cmd1 CVE
  44. 1,494.teler.app1 CVE
  45. 1,495.zotregistry.io/zot1 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →