Go Package Vulnerabilities

All 1,379 Go modules with known CVEs, ranked by live CVE volume — 6,214 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 951.github.com/huandu/facebook1 CVE
  2. 952.github.com/huandu/facebook/v21 CVE
  3. 953.github.com/hwameistor/hwameistor1 CVE
  4. 954.github.com/hybridgroup/gobot1 CVE
  5. 955.github.com/IceWhaleTech/CasaOS-Gateway1 CVE
  6. 956.github.com/imroc/req1 CVE
  7. 957.github.com/imroc/req/v21 CVE
  8. 958.github.com/imroc/req/v31 CVE
  9. 959.github.com/in-toto/go-witness1 CVE
  10. 960.github.com/in-toto/in-toto-golang1 CVE
  11. 961.github.com/ipfs/go-bitfield1 CVE
  12. 962.github.com/ipfs/go-bitswap1 CVE
  13. 963.github.com/ipfs/go-libipfs1 CVE
  14. 964.github.com/ipfs/go-merkledag1 CVE
  15. 965.github.com/ipfs/go-unixfs1 CVE
  16. 966.github.com/ipfs/go-unixfsnode1 CVE
  17. 967.github.com/ipld/go-codec-dagpb1 CVE
  18. 968.github.com/istio/istio1 CVE
  19. 969.github.com/itang/gohttp1 CVE
  20. 970.github.com/j3ssie/osmedeus1 CVE
  21. 971.github.com/jackc/pgproto31 CVE
  22. 972.github.com/jackc/pgx/v5/pgproto31 CVE
  23. 973.github.com/jaegertracing/jaeger1 CVE
  24. 974.github.com/jaredallard/archives1 CVE
  25. 975.github.com/jasonlovesdoggo/abacus1 CVE
  26. 976.github.com/jessfraz/pastebinit1 CVE
  27. 977.github.com/jkroepke/openvpn-auth-oauth21 CVE
  28. 978.github.com/jm33-m0/emp3r0r/core1 CVE
  29. 979.github.com/jmorganca/ollama1 CVE
  30. 980.github.com/jon4hz/jellysweep1 CVE
  31. 981.github.com/jptosso/coraza-waf1 CVE
  32. 982.github.com/juanfont/headscale1 CVE
  33. 983.github.com/juju/utils1 CVE
  34. 984.github.com/juju/utils/v21 CVE
  35. 985.github.com/juju/utils/v31 CVE
  36. 986.github.com/juju/utils/v41 CVE
  37. 987.github.com/juju/utils/v4/cert1 CVE
  38. 988.github.com/julien040/anyquery/plugins/brave1 CVE
  39. 989.github.com/julien040/anyquery/plugins/chrome1 CVE
  40. 990.github.com/julien040/anyquery/plugins/edge1 CVE
  41. 991.github.com/julien040/anyquery/plugins/safari1 CVE
  42. 992.github.com/jumpserver/jumpserver1 CVE
  43. 993.github.com/kanisterio/kanister1 CVE
  44. 994.github.com/karmada-io/dashboard1 CVE
  45. 995.github.com/kata-containers/agent1 CVE
  46. 996.github.com/kata-containers/kata-containers/src/runtime1 CVE
  47. 997.github.com/kataras/iris1 CVE
  48. 998.github.com/kataras/iris/v121 CVE
  49. 999.github.com/kava-labs/kava1 CVE
  50. 1,000.github.com/Kava-Labs/kava1 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →