Go Package Vulnerabilities

All 1,317 Go modules with known CVEs, ranked by live CVE volume — 5,618 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 201.github.com/elastic/beats5 CVEs
  2. 202.github.com/external-secrets/external-secrets5 CVEs
  3. 203.github.com/fluxcd/kustomize-controller5 CVEs
  4. 204.github.com/free5gc/amf5 CVEs
  5. 205.github.com/free5gc/pcf5 CVEs
  6. 206.github.com/gin-gonic/gin5 CVEs
  7. 207.github.com/go-git/go-git/v45 CVEs
  8. 208.github.com/gogs/gogs5 CVEs
  9. 209.github.com/hashicorp/boundary5 CVEs
  10. 210.github.com/hashicorp/go-getter/v25 CVEs
  11. 211.github.com/IBAX-io/go-ibax5 CVEs
  12. 212.github.com/kiali/kiali5 CVEs
  13. 213.github.com/KubeOperator/kubepi5 CVEs
  14. 214.github.com/mattermost/mattermost-plugin-playbooks5 CVEs
  15. 215.github.com/moby/moby/v25 CVEs
  16. 216.github.com/modelcontextprotocol/registry5 CVEs
  17. 217.github.com/openziti/zrok5 CVEs
  18. 218.github.com/openziti/zrok/v25 CVEs
  19. 219.github.com/owncast/owncast5 CVEs
  20. 220.github.com/patrickhener/goshs/v25 CVEs
  21. 221.github.com/pion/dtls5 CVEs
  22. 222.github.com/QuantumNous/new-api5 CVEs
  23. 223.github.com/rclone/rclone5 CVEs
  24. 224.github.com/sigstore/cosign/v25 CVEs
  25. 225.github.com/sigstore/rekor5 CVEs
  26. 226.github.com/snapcore/snapd5 CVEs
  27. 227.github.com/SpectoLabs/hoverfly5 CVEs
  28. 228.github.com/t2bot/matrix-media-repo5 CVEs
  29. 229.github.com/treeverse/lakefs5 CVEs
  30. 230.miniflux.app5 CVEs
  31. 231.github.com/AdguardTeam/AdGuardHome4 CVEs
  32. 232.github.com/amir20/dozzle4 CVEs
  33. 233.github.com/apptainer/apptainer4 CVEs
  34. 234.github.com/arduino/arduino-create-agent4 CVEs
  35. 235.github.com/authelia/authelia4 CVEs
  36. 236.github.com/bnb-chain/tss-lib4 CVEs
  37. 237.github.com/chaos-mesh/chaos-mesh4 CVEs
  38. 238.github.com/cloudreve/Cloudreve/v34 CVEs
  39. 239.github.com/containers/libpod4 CVEs
  40. 240.github.com/cortexproject/cortex4 CVEs
  41. 241.github.com/crewjam/saml4 CVEs
  42. 242.github.com/dadrus/heimdall4 CVEs
  43. 243.github.com/daytonaio/daytona4 CVEs
  44. 244.github.com/dexidp/dex4 CVEs
  45. 245.github.com/dhowden/tag4 CVEs
  46. 246.github.com/elastic/beats/v74 CVEs
  47. 247.github.com/flipped-aurora/gin-vue-admin4 CVEs
  48. 248.github.com/foxcpp/maddy4 CVEs
  49. 249.github.com/free5gc/free5gc4 CVEs
  50. 250.github.com/gofiber/fiber/v34 CVEs

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →