Go Package Vulnerabilities

All 1,378 Go modules with known CVEs, ranked by live CVE volume — 6,206 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 301.github.com/sigstore/gitsign4 CVEs
  2. 302.github.com/smallstep/certificates4 CVEs
  3. 303.github.com/tendermint/tendermint4 CVEs
  4. 304.github.com/theupdateframework/go-tuf/v24 CVEs
  5. 305.github.com/tidwall/gjson4 CVEs
  6. 306.github.com/weaviate/weaviate4 CVEs
  7. 307.golang.org/x/net/http24 CVEs
  8. 308.golang.org/x/text4 CVEs
  9. 309.gopkg.in/src-d/go-git.v44 CVEs
  10. 310.go.woodpecker-ci.org/woodpecker4 CVEs
  11. 311.go.woodpecker-ci.org/woodpecker/v24 CVEs
  12. 312.oras.land/oras-go/v24 CVEs
  13. 313.zotregistry.dev/zot4 CVEs
  14. 314.github.com/AlexxIT/go2rtc3 CVEs
  15. 315.github.com/anchore/quill3 CVEs
  16. 316.github.com/apache/answer3 CVEs
  17. 317.github.com/apache/servicecomb-service-center3 CVEs
  18. 318.github.com/apache/thrift3 CVEs
  19. 319.github.com/argoproj/argo-events3 CVEs
  20. 320.github.com/artifacthub/hub3 CVEs
  21. 321.github.com/aws/aws-sdk-go3 CVEs
  22. 322.github.com/btcsuite/btcd3 CVEs
  23. 323.github.com/buger/jsonparser3 CVEs
  24. 324.github.com/chainguard-dev/malcontent3 CVEs
  25. 325.github.com/cloudflare/circl3 CVEs
  26. 326.github.com/cloudreve/Cloudreve3 CVEs
  27. 327.github.com/cometbft/cometbft3 CVEs
  28. 328.github.com/containous/traefik3 CVEs
  29. 329.github.com/containous/traefik/v23 CVEs
  30. 330.github.com/crossplane/crossplane3 CVEs
  31. 331.github.com/ctfer-io/chall-manager3 CVEs
  32. 332.github.com/dagu-org/dagu3 CVEs
  33. 333.github.com/dapr/dapr3 CVEs
  34. 334.github.com/distribution/distribution/v33 CVEs
  35. 335.github.com/donknap/dpanel3 CVEs
  36. 336.github.com/dunglas/frankenphp3 CVEs
  37. 337.github.com/dutchcoders/transfer.sh3 CVEs
  38. 338.github.com/ElrondNetwork/elrond-go3 CVEs
  39. 339.github.com/fleetdm/fleet3 CVEs
  40. 340.github.com/fluxcd/helm-controller3 CVEs
  41. 341.github.com/fluxcd/source-controller3 CVEs
  42. 342.github.com/flyteorg/flyteadmin3 CVEs
  43. 343.github.com/free5gc/nrf3 CVEs
  44. 344.github.com/free5gc/smf3 CVEs
  45. 345.github.com/git-lfs/git-lfs/v33 CVEs
  46. 346.github.com/go-chi/chi/v5/middleware3 CVEs
  47. 347.github.com/go-jose/go-jose/v33 CVEs
  48. 348.github.com/go-jose/go-jose/v43 CVEs
  49. 349.github.com/gomarkdown/markdown3 CVEs
  50. 350.github.com/go-skynet/LocalAI3 CVEs

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →