Go — vulnerability landscape

Every CVE-affected package in the Go ecosystem, sorted by risk.

Last updated 6/4/2026, 12:34:53 PM

#PackageCVEsKEVMax EPSS
1github.com/grafana/grafana59294.4%
2stdlib157194.1%
3gogs.io/gogs49189.6%
4golang.org/x/net30194.4%
5github.com/minio/minio15152.1%
6github.com/wazuh/wazuh3193.5%
7github.com/aquasecurity/trivy2129.4%
8google.golang.org/grpc2194.4%
9github.com/nghttp2/nghttp21194.4%
10github.com/gorilla/sessions1194.3%
11github.com/chai2010/webp1193.3%
12github.com/mattermost/mattermost-server26255.2%
13github.com/mattermost/mattermost/server/v819655.2%
14github.com/mattermost/mattermost-server/v618755.2%
15github.com/mattermost/mattermost-server/v516455.2%
16github.com/usememos/memos7527.9%
17github.com/hashicorp/vault552.2%
18github.com/rancher/rancher5479.6%
19k8s.io/kubernetes5084.5%
20github.com/siyuan-note/siyuan/kernel503.6%
21github.com/argoproj/argo-cd4680.2%
22github.com/argoproj/argo-cd/v24580.2%
23code.gitea.io/gitea4393.5%
24github.com/zitadel/zitadel4010.8%
25github.com/traefik/traefik/v23776.8%
26github.com/traefik/traefik3676.8%
27github.com/docker/docker3471.9%
28github.com/answerdev/answer348.5%
29github.com/hashicorp/nomad340.8%
30code.vikunja.io/api320.1%
31github.com/cilium/cilium321.8%
32github.com/hashicorp/consul3287.8%
33toolchain3056.8%
34github.com/filebrowser/filebrowser/v22910.3%
35github.com/traefik/traefik/v32913.9%
36golang.org/x/crypto2854.2%
37github.com/nats-io/nats-server/v2278.4%
38github.com/ethereum/go-ethereum2512.2%
39github.com/openbao/openbao250.8%
40github.com/fleetdm/fleet/v4251.0%
41github.com/openfga/openfga230.4%
42helm.sh/helm/v3230.7%
43github.com/goharbor/harbor2293.6%
44github.com/nats-io/nats-server218.4%
45github.com/filebrowser/filebrowser201.3%
46github.com/juju/juju1982.1%
47github.com/go-gitea/gitea1926.5%
48github.com/moby/moby1971.9%
49github.com/gotenberg/gotenberg/v8198.8%
50github.com/kyverno/kyverno190.6%
51github.com/1Panel-dev/1Panel1884.2%
52k8s.io/ingress-nginx1791.1%
53github.com/opencontainers/runc165.1%
54github.com/0xJacky/Nginx-UI1616.0%
55github.com/ollama/ollama1693.7%
56github.com/zitadel/zitadel/v2150.3%
57kubevirt.io/kubevirt150.4%
58github.com/containerd/containerd1513.3%
59github.com/coredns/coredns150.3%
60github.com/mattermost/mattermost-plugin-confluence140.2%
61github.com/ellanetworks/core140.1%
62github.com/containers/podman/v4140.8%
63github.com/authzed/spicedb140.4%
64d7y.io/dragonfly/v21366.2%
65github.com/containers/podman/v31333.3%
66github.com/argoproj/argo-workflows/v3130.3%
67github.com/caddyserver/caddy/v2122.9%
68github.com/canonical/lxd120.2%
69github.com/casdoor/casdoor1260.0%
70github.com/cri-o/cri-o1223.8%
71github.com/containers/podman120.8%
72github.com/containers/podman/v2120.8%
73github.com/lxc/incus/v6110.1%
74github.com/go-git/go-git/v5114.0%
75github.com/OliveTin/OliveTin112.0%
76go.opentelemetry.io/obi110.0%
77github.com/gofiber/fiber/v2110.5%
78github.com/gravitl/netmaker1186.6%
79github.com/lxc/incus110.1%
80github.com/dragonflyoss/dragonfly111.5%
81github.com/mattermost/mattermost110.2%
82github.com/envoyproxy/envoy110.1%
83github.com/navidrome/navidrome1185.1%
84github.com/sylabs/singularity100.9%
85github.com/patrickhener/goshs100.2%
86github.com/pomerium/pomerium100.7%
87github.com/lxc/incus/v6/cmd/incusd100.1%
88github.com/greenpau/caddy-security101.2%
89github.com/Tencent/WeKnora100.5%
90github.com/charmbracelet/soft-serve100.6%
91github.com/beego/beego/v2100.8%
92github.com/forceu/gokapi100.1%
93github.com/pterodactyl/wings100.8%
94istio.io/istio100.7%
95github.com/argoproj/argo-workflows90.3%
96github.com/portainer/portainer90.3%
97github.com/bishopfox/sliver90.8%
98helm.sh/helm90.6%
99github.com/kubernetes/kubernetes990.2%
100github.com/oauth2-proxy/oauth2-proxy/v790.4%
101github.com/axllent/mailpit91.6%
102github.com/neuvector/neuvector90.3%
103github.com/cloudflare/cfrpki91.9%
104golang.org/x/image90.5%
105github.com/argoproj/argo-workflows/v290.3%
106github.com/apache/incubator-answer926.7%
107github.com/sigstore/cosign90.7%
108github.com/esm-dev/esm.sh96.4%
109github.com/argoproj/argo-cd/v395.4%
110github.com/apache/trafficcontrol850.6%
111github.com/stacklok/minder80.4%
112github.com/beego/beego80.5%
113github.com/oauth2-proxy/oauth2-proxy80.4%
114go.etcd.io/etcd80.5%
115chainguard.dev/melange80.1%
116github.com/getarcaneapp/arcane/backend81.3%
117github.com/free5gc/udr80.1%
118github.com/kubeedge/kubeedge80.6%
119github.com/drakkan/sftpgo/v281.3%
120github.com/tektoncd/pipeline80.1%
121github.com/argoproj/argo-workflows/v480.1%
122github.com/containers/buildah80.3%
123github.com/lf-edge/eve80.1%
124chainguard.dev/apko80.2%
125github.com/drakkan/sftpgo81.3%
126github.com/pinchtab/pinchtab70.1%
127github.com/quic-go/quic-go71.8%
128www.velocidex.com/golang/velociraptor70.3%
129github.com/containers/podman/v570.4%
130github.com/osrg/gobgp/v470.2%
131github.com/hyperledger/fabric70.7%
132github.com/hashicorp/go-getter72.5%
133go.temporal.io/server70.1%
134github.com/QuantumNous/new-api70.0%
135go.etcd.io/etcd/v370.5%
136github.com/free5gc/udm70.3%
137github.com/free5gc/nef70.1%
138github.com/moby/buildkit710.3%
139github.com/alist-org/alist/v371.2%
140github.com/enchant97/note-mark/backend70.6%
141github.com/gophish/gophish70.7%
142github.com/elastic/beats70.5%
143github.com/prometheus/prometheus687.5%
144github.com/osrg/gobgp/v360.3%
145github.com/osrg/gobgp60.2%
146github.com/containerd/containerd/v260.3%
147github.com/evmos/evmos/v260.6%
148github.com/evmos/evmos/v360.6%
149github.com/open-policy-agent/opa61.4%
150vitess.io/vitess60.8%
151goauthentik.io63.0%
152github.com/nezhahq/nezha6
153github.com/go-git/go-git60.2%
154github.com/git-lfs/git-lfs692.9%
155github.com/cli/cli/v267.5%
156github.com/omec-project/amf60.1%
157github.com/xyproto/algernon60.3%
158github.com/evmos/evmos/v460.6%
159github.com/consensys/gnark60.2%
160github.com/fluxcd/flux260.6%
161github.com/mattermost/mattermost-plugin-playbooks60.2%
162github.com/evmos/evmos/v760.6%
163github.com/dgraph-io/dgraph60.2%
164github.com/evmos/evmos/v560.6%
165github.com/schollz/croc/v960.1%
166github.com/elastic/beats/v760.4%
167github.com/evmos/evmos/v660.6%
168github.com/evmos/evmos60.6%
169github.com/schollz/croc60.1%
170github.com/schollz/croc/v660.1%
171github.com/cubefs/cubefs60.2%
172github.com/schollz/croc/v860.1%
173github.com/evmos/evmos/v1450.6%
174github.com/KubeOperator/kubepi591.5%
175github.com/projectdiscovery/nuclei/v255.6%
176github.com/projectcapsule/capsule50.2%
177github.com/evmos/evmos/v1750.6%
178github.com/pion/dtls51.2%
179github.com/binance-chain/tss-lib50.6%
180github.com/patrickhener/goshs/v250.1%
181miniflux.app/v250.6%
182github.com/owncast/owncast51.5%
183github.com/IBAX-io/go-ibax539.8%
184github.com/openziti/zrok/v250.1%
185github.com/projectdiscovery/nuclei/v355.6%
186github.com/kiali/kiali56.1%
187github.com/hashicorp/boundary50.4%
188github.com/dgraph-io/dgraph/v2550.2%
189github.com/coder/coder/v250.2%
190github.com/coder/coder50.2%
191github.com/openziti/zrok50.1%
192github.com/projectdiscovery/nuclei55.6%
193github.com/gogs/gogs511.9%
194github.com/gohugoio/hugo50.4%
195github.com/gofiber/fiber/v350.1%
196github.com/go-git/go-git/v453.8%
197github.com/gofiber/fiber50.5%
198github.com/treeverse/lakefs50.1%
199github.com/cli/cli57.5%
200github.com/modelcontextprotocol/registry50.0%
201github.com/gin-gonic/gin50.5%
202github.com/free5gc/pcf50.1%
203github.com/free5gc/amf53.1%
204github.com/authelia/authelia/v450.5%
205github.com/fluxcd/kustomize-controller51.7%
206github.com/t2bot/matrix-media-repo50.4%
207github.com/snapcore/snapd50.6%
208github.com/evmos/evmos/v950.6%
209github.com/evmos/evmos/v850.6%
210github.com/external-secrets/external-secrets50.4%
211github.com/alist-org/alist51.2%
212github.com/distribution/distribution50.1%
213github.com/evmos/evmos/v1550.6%
214github.com/evmos/evmos/v1350.6%
215github.com/evmos/evmos/v1650.6%
216github.com/dgraph-io/dgraph/v2450.2%
217github.com/evmos/evmos/v1150.6%
218github.com/evmos/evmos/v1050.6%
219github.com/evmos/evmos/v1250.6%
220github.com/sigstore/cosign/v250.7%
221github.com/moby/moby/v250.0%
222github.com/kubewarden/kubewarden-controller40.1%
223github.com/layer5io/meshery41.6%
224github.com/rclone/rclone416.7%
225github.com/crewjam/saml47.5%
226github.com/bnb-chain/tss-lib40.6%
227github.com/knadh/listmonk461.8%
228github.com/cortexproject/cortex40.6%
229github.com/pion/dtls/v241.2%
230github.com/jackc/pgx/v541.9%
231github.com/AdguardTeam/AdGuardHome40.9%
232zotregistry.dev/zot40.4%
233github.com/projectcalico/calico40.3%
234github.com/containers/libpod40.8%
235github.com/IceWhaleTech/CasaOS-UserService40.7%
236github.com/ory/fosite40.5%
237github.com/ory/oathkeeper40.3%
238github.com/oxia-db/oxia40.1%
239miniflux.app40.5%
240github.com/hahwul/dalfox/v240.1%
241github.com/concourse/concourse40.6%
242github.com/openshift/console41.0%
243github.com/lf-edge/ekuiper41.9%
244golang.org/x/net/http2469.9%
245gopkg.in/src-d/go-git.v444.0%
246github.com/NVIDIA/nvidia-container-toolkit43.9%
247github.com/google/fscrypt40.1%
248github.com/go-git/go-git/v640.1%
249github.com/notaryproject/notation-go40.4%
250github.com/zalando/skipper451.3%
251github.com/chaos-mesh/chaos-mesh42.6%
252github.com/free5gc/free5gc40.3%
253github.com/amir20/dozzle40.2%
254github.com/astaxie/beego40.5%
255github.com/mholt/archiver422.1%
256github.com/tendermint/tendermint40.4%
257github.com/0xJacky/nginx-ui40.3%
258github.com/theupdateframework/go-tuf/v240.3%
259github.com/flipped-aurora/gin-vue-admin40.7%
260github.com/fission/fission4
261github.com/mattermost/mattermost-plugin-msteams40.2%
262github.com/tidwall/gjson40.5%
263github.com/evmos/evmos/v1840.5%
264github.com/sigstore/gitsign40.1%
265github.com/sigstore/rekor40.5%
266github.com/caddyserver/caddy41.4%
267github.com/dexidp/dex41.2%
268github.com/shellhub-io/shellhub40.1%
269github.com/foxcpp/maddy40.6%
270github.com/akuity/kargo40.3%
271github.com/lightningnetwork/lnd40.8%
272github.com/russellhaering/goxmldsig40.5%
273github.com/dadrus/heimdall40.1%
274github.com/arduino/arduino-create-agent40.1%
275github.com/smallstep/certificates40.1%
276github.com/quic-go/webtransport-go30.0%
277github.com/rancher/fleet30.0%
278github.com/apptainer/apptainer30.0%
279github.com/ctfer-io/chall-manager30.5%
280github.com/pydio/cells/v430.5%
281github.com/crossplane/crossplane30.3%
282github.com/lestrrat-go/jwx30.2%
283github.com/pydio/cells30.5%
284github.com/refraction-networking/utls30.0%
285github.com/plentico/plenti371.5%
286github.com/karmada-io/karmada30.3%
287github.com/kata-containers/kata-containers30.1%
288github.com/apache/thrift322.6%
289github.com/pinchtab/pinchtab/cmd/pinchtab30.1%
290github.com/pingcap/tidb30.2%
291github.com/jackc/pgproto3/v231.9%
292github.com/jackc/pgx31.9%
293github.com/containous/traefik/v2376.8%
294github.com/ipfs/go-ipfs31.6%
295github.com/ipld/go-ipld-prime30.4%
296github.com/phachon/mm-wiki30.4%
297github.com/containous/traefik376.8%
298github.com/lestrrat-go/jwx/v230.2%
299github.com/jackc/pgx/v431.9%
300github.com/runatlantis/atlantis30.7%