Go Package Vulnerabilities

All 1,264 Go modules with known CVEs, ranked by live CVE volume — 5,148 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 951.github.com/MANTRA-Chain/mantrachain/v31 CVE
  2. 952.github.com/MANTRA-Chain/mantrachain/v41 CVE
  3. 953.github.com/marten-seemann/webtransport-go1 CVE
  4. 954.github.com/mastercactapus/proxyprotocol1 CVE
  5. 955.github.com/Masterminds/goutils1 CVE
  6. 956.github.com/Masterminds/vcs1 CVE
  7. 957.github.com/matrix-org/pinecone1 CVE
  8. 958.github.com/mattermost/mattermost-plugin-boards1 CVE
  9. 959.github.com/mattermost/mattermost-plugin-channel-export1 CVE
  10. 960.github.com/mattermost/mattermost-plugin-msteams-meetings1 CVE
  11. 961.github.com/mattermost/mattermost/server1 CVE
  12. 962.github.com/mayuresh82/gocast1 CVE
  13. 963.github.com/mccutchen/go-httpbin1 CVE
  14. 964.github.com/mccutchen/go-httpbin/v21 CVE
  15. 965.github.com/mcu-tools/mcuboot1 CVE
  16. 966.github.com/megaease/easeprobe1 CVE
  17. 967.github.com/metal3-io/baremetal-operator/apis1 CVE
  18. 968.github.com/metal3-io/ip-address-manager1 CVE
  19. 969.github.com/mholt/caddy1 CVE
  20. 970.github.com/MicahParks/jwkset1 CVE
  21. 971.github.com/MichaelMure/git-bug1 CVE
  22. 972.github.com/microsoft/go-crypto-openssl1 CVE
  23. 973.github.com/microsoft/go-crypto-openssl/openssl1 CVE
  24. 974.github.com/microsoft/go-crypto-winnative1 CVE
  25. 975.github.com/microsoft/kiota-http-go1 CVE
  26. 976.github.com/mindersec/minder1 CVE
  27. 977.github.com/mindoc-org/mindoc1 CVE
  28. 978.github.com/minio/operator1 CVE
  29. 979.github.com/moby/spdystream1 CVE
  30. 980.github.com/mochi-mqtt/server1 CVE
  31. 981.github.com/mojocn/base64Captcha1 CVE
  32. 982.github.com/mongodb/mongo-tools1 CVE
  33. 983.github.com/MontFerret/ferret1 CVE
  34. 984.github.com/MontFerret/ferret/v21 CVE
  35. 985.github.com/moov-io/signedxml1 CVE
  36. 986.github.com/mutagen-io/mutagen1 CVE
  37. 987.github.com/mutagen-io/mutagen-compose1 CVE
  38. 988.github.com/nanobox-io/golang-nanoauth1 CVE
  39. 989.github.com/nats-io/jwt/v21 CVE
  40. 990.github.com/nats-io/nkeys1 CVE
  41. 991.github.com/NethermindEth/juno1 CVE
  42. 992.github.com/neuvector/scanner1 CVE
  43. 993.github.com/NietThijmen/ShoppingCart1 CVE
  44. 994.github.com/nothub/mrpack-install1 CVE
  45. 995.github.com/nrkno/terraform-provider-windns1 CVE
  46. 996.github.com/ntbosscher/gobase1 CVE
  47. 997.github.com/nuclio/nuclio1 CVE
  48. 998.github.com/nuts-foundation/nuts-node1 CVE
  49. 999.github.com/nwaples/rardecode1 CVE
  50. 1,000.github.com/nwaples/rardecode/v21 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →