Go Package Vulnerabilities

All 1,317 Go modules with known CVEs, ranked by live CVE volume — 5,626 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 401.github.com/apache/answer2 CVEs
  2. 402.github.com/apache/trafficcontrol/v82 CVEs
  3. 403.github.com/aquasecurity/trivy2 CVEs
  4. 404.github.com/aws/amazon-ecs-agent2 CVEs
  5. 405.github.com/basekick-labs/arc2 CVEs
  6. 406.github.com/beam-cloud/beta92 CVEs
  7. 407.github.com/bep/imagemeta2 CVEs
  8. 408.github.com/bettercap/bettercap/v22 CVEs
  9. 409.github.com/bitly/oauth2_proxy2 CVEs
  10. 410.github.com/boxlite-ai/boxlite/sdks/go2 CVEs
  11. 411.github.com/brokercap/Bifrost2 CVEs
  12. 412.github.com/buildkite/elastic-ci-stack-for-aws/v62 CVEs
  13. 413.github.com/bytebase/bytebase2 CVEs
  14. 414.github.com/cert-manager/cert-manager2 CVEs
  15. 415.github.com/clastix/capsule-proxy2 CVEs
  16. 416.github.com/clidey/whodb/core2 CVEs
  17. 417.github.com/cli/go-gh/v22 CVEs
  18. 418.github.com/cloudflare/circl2 CVEs
  19. 419.github.com/cloudflare/cloudflared2 CVEs
  20. 420.github.com/codenotary/immudb2 CVEs
  21. 421.github.com/containernetworking/plugins2 CVEs
  22. 422.github.com/containers/image2 CVEs
  23. 423.github.com/containers/libpod/v22 CVEs
  24. 424.github.com/corazawaf/coraza/v22 CVEs
  25. 425.github.com/corazawaf/coraza/v32 CVEs
  26. 426.github.com/cosmos/ethermint2 CVEs
  27. 427.github.com/couchbase/sync_gateway2 CVEs
  28. 428.github.com/crowdsecurity/crowdsec2 CVEs
  29. 429.github.com/crypto-org-chain/cronos2 CVEs
  30. 430.github.com/ctfer-io/monitoring2 CVEs
  31. 431.github.com/daptin/daptin2 CVEs
  32. 432.github.com/devtron-labs/devtron2 CVEs
  33. 433.github.com/docker/cli2 CVEs
  34. 434.github.com/docker/compose2 CVEs
  35. 435.github.com/docker/compose/v22 CVEs
  36. 436.github.com/docker/distribution2 CVEs
  37. 437.github.com/docker/mcp-gateway2 CVEs
  38. 438.github.com/dvsekhvalnov/jose2go2 CVEs
  39. 439.github.com/edgexfoundry/app-functions-sdk-go2 CVEs
  40. 440.github.com/edgexfoundry/app-functions-sdk-go/v22 CVEs
  41. 441.github.com/elastic/apm-server2 CVEs
  42. 442.github.com/etcd-io/etcd2 CVEs
  43. 443.github.com/expr-lang/expr2 CVEs
  44. 444.github.com/facebook/fbthrift2 CVEs
  45. 445.github.com/filecoin-project/go-f32 CVEs
  46. 446.github.com/flipped-aurora/gin-vue-admin/server2 CVEs
  47. 447.github.com/fluid-cloudnative/fluid2 CVEs
  48. 448.github.com/fluxcd/notification-controller2 CVEs
  49. 449.github.com/forceu/gokapi2 CVEs
  50. 450.github.com/free5gc/nrf2 CVEs

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →