Go Package Vulnerabilities

All 1,384 Go modules with known CVEs, ranked by live CVE volume — 6,243 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,351.go.temporal.io/api1 CVE
  2. 1,352.go.thethings.network/lorawan-stack1 CVE
  3. 1,353.go.thethings.network/lorawan-stack/v31 CVE
  4. 1,354.heckel.io/ntfy1 CVE
  5. 1,355.heckel.io/ntfy/v21 CVE
  6. 1,356.https://github.com/dadrus/heimdall1 CVE
  7. 1,357.https://github.com/filebrowser/filebrowser1 CVE
  8. 1,358.k8s.io/apiextensions-apiserver1 CVE
  9. 1,359.k8s.io/apimachinery1 CVE
  10. 1,360.k8s.io/apiserver1 CVE
  11. 1,361.k8s.io/kops1 CVE
  12. 1,362.k8s.io/kubernetes/cmd/kube-apiserver1 CVE
  13. 1,363.k8s.io/kubernetes/cmd/kubelet1 CVE
  14. 1,364.k8s.io/kubernetes/pkg/kubelet1 CVE
  15. 1,365.k8s.io/kube-state-metrics1 CVE
  16. 1,366.k8s.io/minikube1 CVE
  17. 1,367.k8s.io/mount-utils1 CVE
  18. 1,368.knative.dev/serving1 CVE
  19. 1,369.ktbs.dev/teler1 CVE
  20. 1,370.mellium.im/sasl1 CVE
  21. 1,371.mosn.io/mosn1 CVE
  22. 1,372.net/http1 CVE
  23. 1,373.oras.land/oras1 CVE
  24. 1,374.oras.land/oras-go1 CVE
  25. 1,375.pkg.jsn.cam/caddy-defender1 CVE
  26. 1,376.sftpgo1 CVE
  27. 1,377.sigs.k8s.io/aws-iam-authenticator1 CVE
  28. 1,378.sigs.k8s.io/azurefile-csi-driver1 CVE
  29. 1,379.sigs.k8s.io/secrets-store-sync-controller1 CVE
  30. 1,380.simonwaldherr.de/go/zplgfa1 CVE
  31. 1,381.tailscale.com/cmd1 CVE
  32. 1,382.teler.app1 CVE
  33. 1,383.zotregistry.dev/zot/v21 CVE
  34. 1,384.zotregistry.io/zot1 CVE

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →