Go Package Vulnerabilities

All 1,379 Go modules with known CVEs, ranked by live CVE volume — 6,214 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 601.github.com/zarf-dev/zarf2 CVEs
  2. 602.github.com/zhenorzz/goploy2 CVEs
  3. 603.github.com/zinclabs/zinc2 CVEs
  4. 604.github.com/zincsearch/zincsearch2 CVEs
  5. 605.golang.org/x/net/html2 CVEs
  6. 606.golang.org/x/sys2 CVEs
  7. 607.go.mongodb.org/mongo-driver2 CVEs
  8. 608.google.golang.org/protobuf2 CVEs
  9. 609.go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp2 CVEs
  10. 610.go.opentelemetry.io/otel2 CVEs
  11. 611.go.opentelemetry.io/otel/sdk2 CVEs
  12. 612.gopkg.in/square/go-jose.v12 CVEs
  13. 613.go.woodpecker-ci.org/woodpecker/v32 CVEs
  14. 614.mellium.im/xmpp2 CVEs
  15. 615.open-cluster-management.io/ocm2 CVEs
  16. 616.sigs.k8s.io/secrets-store-csi-driver2 CVEs
  17. 617.siyuan2 CVEs
  18. 618.aahframe.work1 CVE
  19. 619.blitiri.com.ar/go/chasquid1 CVE
  20. 620.charm.land/wish/v21 CVE
  21. 621.code.cloudfoundry.org/archiver1 CVE
  22. 622.code.cloudfoundry.org/gorouter1 CVE
  23. 623.code.vegaprotocol.io/vega1 CVE
  24. 624.ehang.io/nps1 CVE
  25. 625.filippo.io/edwards255191 CVE
  26. 626.filippo.io/nistec1 CVE
  27. 627.github.com/1Panel-dev/1Panel/agent1 CVE
  28. 628.github.com/3scale-sre/marin3r1 CVE
  29. 629.github.com/abhinavxd/libredesk1 CVE
  30. 630.github.com/actiontech/sqle1 CVE
  31. 631.github.com/AdguardTeam/dnsproxy1 CVE
  32. 632.github.com/agentgateway/agentgateway1 CVE
  33. 633.github.com/agnivade/easy-scrypt1 CVE
  34. 634.github.com/aiven/aiven-operator1 CVE
  35. 635.github.com/albertito/chasquid1 CVE
  36. 636.github.com/alexanderzobnin/grafana-zabbix1 CVE
  37. 637.github.com/altcha-org/altcha-lib-go1 CVE
  38. 638.github.com/anchore/grype1 CVE
  39. 639.github.com/anchore/stereoscope1 CVE
  40. 640.github.com/AndrewBurian/powermux1 CVE
  41. 641.github.com/Anipaleja/nginx-defender1 CVE
  42. 642.github.com/antchfx/xmlquery1 CVE
  43. 643.github.com/antchfx/xpath1 CVE
  44. 644.github.com/anyproto/anytype-cli1 CVE
  45. 645.github.com/anyproto/anytype-heart1 CVE
  46. 646.github.com/apache/age/drivers/golang1 CVE
  47. 647.github.com/apache/camel-k1 CVE
  48. 648.github.com/apache/camel-k/v21 CVE
  49. 649.github.com/apache/skywalking-mcp1 CVE
  50. 650.github.com/apache/solr-operator1 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →