Go Package Vulnerabilities

All 1,317 Go modules with known CVEs, ranked by live CVE volume — 5,622 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 351.github.com/milvus-io/milvus3 CVEs
  2. 352.github.com/modelcontextprotocol/go-sdk3 CVEs
  3. 353.github.com/monetr/monetr3 CVEs
  4. 354.github.com/nats-io/jwt3 CVEs
  5. 355.github.com/nats-io/nats-streaming-server3 CVEs
  6. 356.github.com/nektos/act3 CVEs
  7. 357.github.com/notaryproject/notation3 CVEs
  8. 358.github.com/openclaw/crabbox3 CVEs
  9. 359.github.com/openshift/hive3 CVEs
  10. 360.github.com/openshift/origin3 CVEs
  11. 361.github.com/ory/hydra3 CVEs
  12. 362.github.com/phachon/mm-wiki3 CVEs
  13. 363.github.com/pingcap/tidb3 CVEs
  14. 364.github.com/plentico/plenti3 CVEs
  15. 365.github.com/projectcalico/calico/v33 CVEs
  16. 366.github.com/projectcontour/contour3 CVEs
  17. 367.github.com/pydio/cells3 CVEs
  18. 368.github.com/pydio/cells/v43 CVEs
  19. 369.github.com/quic-go/webtransport-go3 CVEs
  20. 370.github.com/runatlantis/atlantis3 CVEs
  21. 371.github.com/sigstore/fulcio3 CVEs
  22. 372.github.com/sigstore/timestamp-authority3 CVEs
  23. 373.github.com/sigstore/timestamp-authority/v23 CVEs
  24. 374.github.com/square/go-jose3 CVEs
  25. 375.github.com/syncthing/syncthing3 CVEs
  26. 376.github.com/Tencent/WeKnora3 CVEs
  27. 377.github.com/tharsis/evmos3 CVEs
  28. 378.github.com/tilt-dev/tilt3 CVEs
  29. 379.github.com/ubuntu/authd3 CVEs
  30. 380.github.com/ulikunitz/xz3 CVEs
  31. 381.github.com/wazuh/wazuh3 CVEs
  32. 382.github.com/weaveworks/weave-gitops3 CVEs
  33. 383.github.com/weaviate/weaviate3 CVEs
  34. 384.github.com/woodpecker-ci/woodpecker3 CVEs
  35. 385.gopkg.in/yaml.v23 CVEs
  36. 386.go.senan.xyz/gonic3 CVEs
  37. 387.goshs.de/goshs3 CVEs
  38. 388.goshs.de/goshs/v23 CVEs
  39. 389.helm.sh/helm/v43 CVEs
  40. 390.k8s.io/client-go3 CVEs
  41. 391.tailscale.com3 CVEs
  42. 392.volcano.sh/volcano3 CVEs
  43. 393.zotregistry.dev/zot3 CVEs
  44. 394.antrea.io/antrea2 CVEs
  45. 395.Ciliumgithub.com/cilium/cilium2 CVEs
  46. 396.code.sajari.com/docconv2 CVEs
  47. 397.github.com/1Panel-dev/1Panel/core2 CVEs
  48. 398.github.com/Ackites/KillWxapkg2 CVEs
  49. 399.github.com/akuity/kargo2 CVEs
  50. 400.github.com/ansible-semaphore/semaphore2 CVEs

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →