Go Package Vulnerabilities
All 1,460 Go modules with known CVEs, ranked by live CVE volume — 6,746 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 1.github.com/mattermost/mattermost-server296 CVEs
- 2.github.com/mattermost/mattermost-server/v6222 CVEs
- 3.github.com/mattermost/mattermost/server/v8207 CVEs
- 4.github.com/mattermost/mattermost-server/v5199 CVEs
- 5.stdlib170 CVEs
- 6.code.gitea.io/gitea122 CVEs
- 7.github.com/siyuan-note/siyuan/kernel104 CVEs
- 8.github.com/usememos/memos74 CVEs
- 9.gogs.io/gogs71 CVEs
- 10.github.com/grafana/grafana65 CVEs
- 11.github.com/traefik/traefik62 CVEs
- 12.github.com/traefik/traefik/v260 CVEs
- 13.github.com/rancher/rancher57 CVEs
- 14.github.com/hashicorp/vault55 CVEs
- 15.github.com/traefik/traefik/v352 CVEs
- 16.github.com/zitadel/zitadel52 CVEs
- 17.k8s.io/kubernetes50 CVEs
- 18.github.com/argoproj/argo-cd49 CVEs
- 19.github.com/argoproj/argo-cd/v249 CVEs
- 20.gitea.dev45 CVEs
- 21.github.com/filebrowser/filebrowser/v243 CVEs
- 22.github.com/filebrowser/filebrowser42 CVEs
- 23.code.vikunja.io/api38 CVEs
- 24.github.com/cilium/cilium36 CVEs
- 25.github.com/answerdev/answer34 CVEs
- 26.github.com/hashicorp/nomad34 CVEs
- 27.github.com/docker/docker33 CVEs
- 28.github.com/openbao/openbao33 CVEs
- 29.golang.org/x/net33 CVEs
- 30.github.com/fleetdm/fleet/v432 CVEs
- 31.github.com/hashicorp/consul32 CVEs
- 32.github.com/lxc/incus32 CVEs
- 33.github.com/lxc/incus/v632 CVEs
- 34.toolchain32 CVEs
- 35.golang.org/x/crypto31 CVEs
- 36.github.com/rclone/rclone29 CVEs
- 37.github.com/openfga/openfga27 CVEs
- 38.github.com/kyverno/kyverno26 CVEs
- 39.github.com/nats-io/nats-server/v226 CVEs
- 40.github.com/ethereum/go-ethereum25 CVEs
- 41.github.com/coder/coder24 CVEs
- 42.github.com/coder/coder/v224 CVEs
- 43.helm.sh/helm/v323 CVEs
- 44.github.com/containerd/containerd22 CVEs
- 45.github.com/goharbor/harbor22 CVEs
- 46.github.com/casdoor/casdoor20 CVEs
- 47.github.com/go-gitea/gitea20 CVEs
- 48.github.com/gotenberg/gotenberg/v720 CVEs
- 49.github.com/gotenberg/gotenberg/v820 CVEs
- 50.github.com/nats-io/nats-server20 CVEs
Which Go packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Book a Demo →