Go Package Vulnerabilities

All 1,317 Go modules with known CVEs, ranked by live CVE volume — 5,618 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 251.github.com/go-git/go-git/v64 CVEs
  2. 252.github.com/googleapis/mcp-toolbox4 CVEs
  3. 253.github.com/google/fscrypt4 CVEs
  4. 254.github.com/hahwul/dalfox4 CVEs
  5. 255.github.com/hahwul/dalfox/v24 CVEs
  6. 256.github.com/hashicorp/go-getter/gcs/v24 CVEs
  7. 257.github.com/hashicorp/go-getter/s3/v24 CVEs
  8. 258.github.com/IceWhaleTech/CasaOS-UserService4 CVEs
  9. 259.github.com/jackc/pgx/v54 CVEs
  10. 260.github.com/julien040/anyquery4 CVEs
  11. 261.github.com/knadh/listmonk4 CVEs
  12. 262.github.com/kubewarden/kubewarden-controller4 CVEs
  13. 263.github.com/layer5io/meshery4 CVEs
  14. 264.github.com/lf-edge/ekuiper4 CVEs
  15. 265.github.com/lightningnetwork/lnd4 CVEs
  16. 266.github.com/mattermost/mattermost-plugin-github4 CVEs
  17. 267.github.com/mholt/archiver4 CVEs
  18. 268.github.com/nhost/nhost4 CVEs
  19. 269.github.com/notaryproject/notation-go4 CVEs
  20. 270.github.com/nuclio/nuclio4 CVEs
  21. 271.github.com/NVIDIA/nvidia-container-toolkit4 CVEs
  22. 272.github.com/OliveTin/OliveTin4 CVEs
  23. 273.github.com/openshift/console4 CVEs
  24. 274.github.com/ory/fosite4 CVEs
  25. 275.github.com/ory/oathkeeper4 CVEs
  26. 276.github.com/oxia-db/oxia4 CVEs
  27. 277.github.com/pion/dtls/v24 CVEs
  28. 278.github.com/russellhaering/gosaml24 CVEs
  29. 279.github.com/shellhub-io/shellhub4 CVEs
  30. 280.github.com/sigstore/gitsign4 CVEs
  31. 281.github.com/smallstep/certificates4 CVEs
  32. 282.github.com/tendermint/tendermint4 CVEs
  33. 283.github.com/theupdateframework/go-tuf/v24 CVEs
  34. 284.github.com/tidwall/gjson4 CVEs
  35. 285.golang.org/x/net/http24 CVEs
  36. 286.golang.org/x/text4 CVEs
  37. 287.gopkg.in/src-d/go-git.v44 CVEs
  38. 288.go.woodpecker-ci.org/woodpecker4 CVEs
  39. 289.go.woodpecker-ci.org/woodpecker/v24 CVEs
  40. 290.oras.land/oras-go/v24 CVEs
  41. 291.vitess.io/vitess4 CVEs
  42. 292.github.com/0xJacky/nginx-ui3 CVEs
  43. 293.github.com/AlexxIT/go2rtc3 CVEs
  44. 294.github.com/apache/servicecomb-service-center3 CVEs
  45. 295.github.com/apache/thrift3 CVEs
  46. 296.github.com/argoproj/argo-events3 CVEs
  47. 297.github.com/artifacthub/hub3 CVEs
  48. 298.github.com/aws/aws-sdk-go3 CVEs
  49. 299.github.com/btcsuite/btcd3 CVEs
  50. 300.github.com/buger/jsonparser3 CVEs

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →