Go Package Vulnerabilities

All 1,379 Go modules with known CVEs, ranked by live CVE volume — 6,212 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 401.github.com/sigstore/fulcio3 CVEs
  2. 402.github.com/sigstore/sigstore-go3 CVEs
  3. 403.github.com/sigstore/timestamp-authority3 CVEs
  4. 404.github.com/sigstore/timestamp-authority/v23 CVEs
  5. 405.github.com/square/go-jose3 CVEs
  6. 406.github.com/steveiliop56/tinyauth3 CVEs
  7. 407.github.com/syncthing/syncthing3 CVEs
  8. 408.github.com/tharsis/evmos3 CVEs
  9. 409.github.com/tilt-dev/tilt3 CVEs
  10. 410.github.com/tomwright/dasel3 CVEs
  11. 411.github.com/tomwright/dasel/v23 CVEs
  12. 412.github.com/tomwright/dasel/v33 CVEs
  13. 413.github.com/ubuntu/authd3 CVEs
  14. 414.github.com/ulikunitz/xz3 CVEs
  15. 415.github.com/wazuh/wazuh3 CVEs
  16. 416.github.com/weaveworks/weave-gitops3 CVEs
  17. 417.github.com/woodpecker-ci/woodpecker3 CVEs
  18. 418.gopkg.in/yaml.v23 CVEs
  19. 419.go.senan.xyz/gonic3 CVEs
  20. 420.helm.sh/helm/v43 CVEs
  21. 421.k8s.io/client-go3 CVEs
  22. 422.tailscale.com3 CVEs
  23. 423.Traefik3 CVEs
  24. 424.volcano.sh/volcano3 CVEs
  25. 425.antrea.io/antrea2 CVEs
  26. 426.Ciliumgithub.com/cilium/cilium2 CVEs
  27. 427.code.sajari.com/docconv2 CVEs
  28. 428.github.com/1Panel-dev/1Panel/core2 CVEs
  29. 429.github.com/Ackites/KillWxapkg2 CVEs
  30. 430.github.com/anchore/syft2 CVEs
  31. 431.github.com/ansible-semaphore/semaphore2 CVEs
  32. 432.github.com/apache/trafficcontrol/v82 CVEs
  33. 433.github.com/aws/amazon-ecs-agent2 CVEs
  34. 434.github.com/azukaar/cosmos-server2 CVEs
  35. 435.github.com/basekick-labs/arc2 CVEs
  36. 436.github.com/beam-cloud/beta92 CVEs
  37. 437.github.com/bep/imagemeta2 CVEs
  38. 438.github.com/bettercap/bettercap/v22 CVEs
  39. 439.github.com/bitly/oauth2_proxy2 CVEs
  40. 440.github.com/boxlite-ai/boxlite/sdks/go2 CVEs
  41. 441.github.com/brokercap/Bifrost2 CVEs
  42. 442.github.com/buildkite/elastic-ci-stack-for-aws/v62 CVEs
  43. 443.github.com/bytebase/bytebase2 CVEs
  44. 444.github.com/centrifugal/centrifugo2 CVEs
  45. 445.github.com/centrifugal/centrifugo/v32 CVEs
  46. 446.github.com/centrifugal/centrifugo/v42 CVEs
  47. 447.github.com/centrifugal/centrifugo/v52 CVEs
  48. 448.github.com/centrifugal/centrifugo/v62 CVEs
  49. 449.github.com/cert-manager/cert-manager2 CVEs
  50. 450.github.com/clastix/capsule-proxy2 CVEs

Which Go packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →