Vulnerable packages
Packages
Reverse lookup: every package coordinate seen in a CVE's affected list. Click a row to see every CVE that mentions it — with affected version range, fixed-in version, severity, and KEV status.
Sort by:
| # | Ecosystem | Package | CVEs | Latest CVE | purl |
|---|---|---|---|---|---|
| 1 | golang | github.com/mattermost/mattermost/server/v8 | 182 | Apr 15, 2026 | pkg:golang/github.com/mattermost/mattermost/server/v8 |
| 2 | golang | github.com/mattermost/mattermost-server | 152 | Apr 15, 2026 | pkg:golang/github.com/mattermost/mattermost-server |
| 3 | golang | github.com/usememos/memos | 74 | Apr 20, 2026 | pkg:golang/github.com/usememos/memos |
| 4 | golang | github.com/grafana/grafana | 59 | Mar 27, 2026 | pkg:golang/github.com/grafana/grafana |
| 5 | golang | github.com/hashicorp/vault | 55 | Apr 17, 2026 | pkg:golang/github.com/hashicorp/vault |
| 6 | golang | github.com/rancher/rancher | 54 | Feb 25, 2026 | pkg:golang/github.com/rancher/rancher |
| 7 | golang | gogs.io/gogs | 49 | Mar 5, 2026 | pkg:golang/gogs.io/gogs |
| 8 | golang | github.com/mattermost/mattermost-server/v6 | 47 | Nov 14, 2025 | pkg:golang/github.com/mattermost/mattermost-server/v6 |
| 9 | golang | github.com/siyuan-note/siyuan/kernel | 44 | Apr 24, 2026 | pkg:golang/github.com/siyuan-note/siyuan/kernel |
| 10 | golang | k8s.io/kubernetes | 43 | Dec 14, 2025 | pkg:golang/k8s.io/kubernetes |
| 11 | golang | github.com/argoproj/argo-cd/v2 | 36 | Oct 1, 2025 | pkg:golang/github.com/argoproj/argo-cd/v2 |
| 12 | golang | github.com/answerdev/answer | 34 | Sep 7, 2023 | pkg:golang/github.com/answerdev/answer |
| 13 | golang | github.com/zitadel/zitadel | 34 | Mar 20, 2026 | pkg:golang/github.com/zitadel/zitadel |
| 14 | golang | github.com/traefik/traefik/v2 | 33 | Apr 30, 2026 | pkg:golang/github.com/traefik/traefik/v2 |
| 15 | golang | code.gitea.io/gitea | 32 | Jan 22, 2026 | pkg:golang/code.gitea.io/gitea |
| 16 | golang | code.vikunja.io/api | 32 | Apr 10, 2026 | pkg:golang/code.vikunja.io/api |
| 17 | golang | github.com/argoproj/argo-cd | 32 | Oct 1, 2025 | pkg:golang/github.com/argoproj/argo-cd |
| 18 | golang | github.com/cilium/cilium | 32 | May 8, 2026 | pkg:golang/github.com/cilium/cilium |
| 19 | golang | github.com/hashicorp/consul | 32 | Mar 11, 2026 | pkg:golang/github.com/hashicorp/consul |
| 20 | golang | github.com/hashicorp/nomad | 32 | Jun 11, 2025 | pkg:golang/github.com/hashicorp/nomad |
| 21 | golang | github.com/docker/docker | 29 | Mar 31, 2026 | pkg:golang/github.com/docker/docker |
| 22 | golang | github.com/filebrowser/filebrowser/v2 | 28 | Apr 7, 2026 | pkg:golang/github.com/filebrowser/filebrowser/v2 |
| 23 | golang | github.com/traefik/traefik/v3 | 27 | Apr 30, 2026 | pkg:golang/github.com/traefik/traefik/v3 |
| 24 | golang | github.com/ethereum/go-ethereum | 25 | Feb 19, 2026 | pkg:golang/github.com/ethereum/go-ethereum |
| 25 | golang | github.com/nats-io/nats-server/v2 | 23 | Mar 25, 2026 | pkg:golang/github.com/nats-io/nats-server/v2 |
| 26 | golang | github.com/openfga/openfga | 23 | Apr 22, 2026 | pkg:golang/github.com/openfga/openfga |
| 27 | golang | helm.sh/helm/v3 | 23 | Apr 9, 2026 | pkg:golang/helm.sh/helm/v3 |
| 28 | golang | github.com/goharbor/harbor | 22 | Mar 23, 2026 | pkg:golang/github.com/goharbor/harbor |
| 29 | golang | github.com/openbao/openbao | 22 | May 14, 2026 | pkg:golang/github.com/openbao/openbao |
| 30 | golang | github.com/0xjacky/nginx-ui | 20 | May 12, 2026 | pkg:golang/github.com/0xjacky/nginx-ui |
| 31 | golang | golang.org/x/net | 20 | Apr 16, 2025 | pkg:golang/golang.org/x/net |
| 32 | golang | github.com/go-gitea/gitea | 19 | Jan 22, 2026 | pkg:golang/github.com/go-gitea/gitea |
| 33 | golang | github.com/fleetdm/fleet/v4 | 18 | Apr 8, 2026 | pkg:golang/github.com/fleetdm/fleet/v4 |
| 34 | golang | github.com/juju/juju | 18 | Apr 10, 2026 | pkg:golang/github.com/juju/juju |
| 35 | golang | github.com/traefik/traefik | 18 | Apr 30, 2026 | pkg:golang/github.com/traefik/traefik |
| 36 | golang | github.com/1panel-dev/1panel | 17 | Dec 10, 2025 | pkg:golang/github.com/1panel-dev/1panel |
| 37 | golang | github.com/mattermost/mattermost-server/v5 | 17 | Nov 14, 2025 | pkg:golang/github.com/mattermost/mattermost-server/v5 |
| 38 | golang | k8s.io/ingress-nginx | 17 | Mar 19, 2026 | pkg:golang/k8s.io/ingress-nginx |
| 39 | golang | github.com/ollama/ollama | 16 | May 4, 2026 | pkg:golang/github.com/ollama/ollama |
| 40 | golang | github.com/coredns/coredns | 15 | May 5, 2026 | pkg:golang/github.com/coredns/coredns |
| 41 | golang | github.com/gotenberg/gotenberg/v8 | 15 | May 14, 2026 | pkg:golang/github.com/gotenberg/gotenberg/v8 |
| 42 | golang | github.com/kyverno/kyverno | 15 | Apr 24, 2026 | pkg:golang/github.com/kyverno/kyverno |
| 43 | golang | github.com/minio/minio | 15 | May 11, 2026 | pkg:golang/github.com/minio/minio |
| 44 | golang | github.com/opencontainers/runc | 15 | Nov 6, 2025 | pkg:golang/github.com/opencontainers/runc |
| 45 | golang | github.com/zitadel/zitadel/v2 | 15 | Mar 7, 2026 | pkg:golang/github.com/zitadel/zitadel/v2 |
| 46 | golang | kubevirt.io/kubevirt | 15 | Apr 15, 2026 | pkg:golang/kubevirt.io/kubevirt |
| 47 | golang | github.com/containerd/containerd | 14 | Nov 7, 2025 | pkg:golang/github.com/containerd/containerd |
| 48 | golang | github.com/ellanetworks/core | 14 | May 11, 2026 | pkg:golang/github.com/ellanetworks/core |
| 49 | golang | github.com/mattermost/mattermost-plugin-confluence | 14 | Feb 6, 2026 | pkg:golang/github.com/mattermost/mattermost-plugin-confluence |
| 50 | golang | d7y.io/dragonfly/v2 | 13 | Jan 22, 2026 | pkg:golang/d7y.io/dragonfly/v2 |
| 51 | golang | github.com/argoproj/argo-workflows/v3 | 13 | May 9, 2026 | pkg:golang/github.com/argoproj/argo-workflows/v3 |
| 52 | golang | github.com/authzed/spicedb | 13 | Apr 15, 2026 | pkg:golang/github.com/authzed/spicedb |
| 53 | golang | github.com/nats-io/nats-server | 13 | Mar 25, 2026 | pkg:golang/github.com/nats-io/nats-server |
| 54 | golang | golang.org/x/crypto | 13 | Nov 19, 2025 | pkg:golang/golang.org/x/crypto |
| 55 | golang | github.com/canonical/lxd | 12 | Apr 9, 2026 | pkg:golang/github.com/canonical/lxd |
| 56 | golang | github.com/casdoor/casdoor | 12 | Apr 3, 2026 | pkg:golang/github.com/casdoor/casdoor |
| 57 | golang | github.com/cri-o/cri-o | 12 | Aug 20, 2025 | pkg:golang/github.com/cri-o/cri-o |
| 58 | golang | github.com/containers/podman/v4 | 11 | Apr 14, 2026 | pkg:golang/github.com/containers/podman/v4 |
| 59 | golang | github.com/dragonflyoss/dragonfly | 11 | Sep 17, 2025 | pkg:golang/github.com/dragonflyoss/dragonfly |
| 60 | golang | github.com/envoyproxy/envoy | 11 | Mar 10, 2026 | pkg:golang/github.com/envoyproxy/envoy |
| 61 | golang | github.com/gofiber/fiber/v2 | 11 | May 11, 2026 | pkg:golang/github.com/gofiber/fiber/v2 |
| 62 | golang | github.com/moby/moby | 11 | Mar 31, 2026 | pkg:golang/github.com/moby/moby |
| 63 | golang | github.com/navidrome/navidrome | 11 | Feb 4, 2026 | pkg:golang/github.com/navidrome/navidrome |
| 64 | golang | github.com/olivetin/olivetin | 11 | Mar 11, 2026 | pkg:golang/github.com/olivetin/olivetin |
| 65 | golang | istio.io/istio | 11 | May 7, 2026 | pkg:golang/istio.io/istio |
| 66 | golang | github.com/beego/beego/v2 | 10 | Mar 31, 2025 | pkg:golang/github.com/beego/beego/v2 |
| 67 | golang | github.com/charmbracelet/soft-serve | 10 | Mar 24, 2026 | pkg:golang/github.com/charmbracelet/soft-serve |
| 68 | golang | github.com/filebrowser/filebrowser | 10 | Jan 19, 2026 | pkg:golang/github.com/filebrowser/filebrowser |
| 69 | golang | github.com/forceu/gokapi | 10 | Mar 13, 2026 | pkg:golang/github.com/forceu/gokapi |
| 70 | golang | github.com/greenpau/caddy-security | 10 | Feb 17, 2024 | pkg:golang/github.com/greenpau/caddy-security |
| 71 | golang | github.com/hashicorp/go-getter | 10 | Apr 9, 2026 | pkg:golang/github.com/hashicorp/go-getter |
| 72 | golang | github.com/lxc/incus/v6/cmd/incusd | 10 | May 7, 2026 | pkg:golang/github.com/lxc/incus/v6/cmd/incusd |
| 73 | golang | github.com/mattermost/mattermost | 10 | Dec 17, 2025 | pkg:golang/github.com/mattermost/mattermost |
| 74 | golang | github.com/patrickhener/goshs | 10 | May 4, 2026 | pkg:golang/github.com/patrickhener/goshs |
| 75 | golang | github.com/pomerium/pomerium | 10 | Oct 2, 2024 | pkg:golang/github.com/pomerium/pomerium |
| 76 | golang | github.com/pterodactyl/wings | 10 | Jan 19, 2026 | pkg:golang/github.com/pterodactyl/wings |
| 77 | golang | github.com/tencent/weknora | 10 | Mar 7, 2026 | pkg:golang/github.com/tencent/weknora |
| 78 | golang | github.com/apache/incubator-answer | 9 | Nov 22, 2024 | pkg:golang/github.com/apache/incubator-answer |
| 79 | golang | github.com/beego/beego | 9 | Mar 31, 2025 | pkg:golang/github.com/beego/beego |
| 80 | golang | github.com/bishopfox/sliver | 9 | Mar 31, 2026 | pkg:golang/github.com/bishopfox/sliver |
| 81 | golang | github.com/cloudflare/cfrpki | 9 | Jan 29, 2025 | pkg:golang/github.com/cloudflare/cfrpki |
| 82 | golang | github.com/esm-dev/esm.sh | 9 | May 12, 2026 | pkg:golang/github.com/esm-dev/esm.sh |
| 83 | golang | github.com/go-git/go-git/v5 | 9 | May 11, 2026 | pkg:golang/github.com/go-git/go-git/v5 |
| 84 | golang | github.com/gravitl/netmaker | 9 | Apr 28, 2026 | pkg:golang/github.com/gravitl/netmaker |
| 85 | golang | github.com/kubernetes/kubernetes | 9 | Mar 1, 2023 | pkg:golang/github.com/kubernetes/kubernetes |
| 86 | golang | github.com/oauth2-proxy/oauth2-proxy/v7 | 9 | Apr 22, 2026 | pkg:golang/github.com/oauth2-proxy/oauth2-proxy/v7 |
| 87 | golang | github.com/sylabs/singularity | 9 | May 28, 2021 | pkg:golang/github.com/sylabs/singularity |
| 88 | golang | chainguard.dev/melange | 8 | Apr 24, 2026 | pkg:golang/chainguard.dev/melange |
| 89 | golang | github.com/argoproj/argo-workflows/v4 | 8 | May 9, 2026 | pkg:golang/github.com/argoproj/argo-workflows/v4 |
| 90 | golang | github.com/caddyserver/caddy/v2 | 8 | Feb 24, 2026 | pkg:golang/github.com/caddyserver/caddy/v2 |
| 91 | golang | github.com/free5gc/udr | 8 | May 8, 2026 | pkg:golang/github.com/free5gc/udr |
| 92 | golang | github.com/kubeedge/kubeedge | 8 | Jul 11, 2022 | pkg:golang/github.com/kubeedge/kubeedge |
| 93 | golang | github.com/lxc/incus/v6 | 8 | Mar 27, 2026 | pkg:golang/github.com/lxc/incus/v6 |
| 94 | golang | github.com/neuvector/neuvector | 8 | Jan 8, 2026 | pkg:golang/github.com/neuvector/neuvector |
| 95 | golang | github.com/portainer/portainer | 8 | May 14, 2026 | pkg:golang/github.com/portainer/portainer |
| 96 | golang | github.com/sigstore/cosign | 8 | Apr 7, 2026 | pkg:golang/github.com/sigstore/cosign |
| 97 | golang | github.com/stacklok/minder | 8 | Jun 18, 2024 | pkg:golang/github.com/stacklok/minder |
| 98 | golang | go.etcd.io/etcd | 8 | May 14, 2026 | pkg:golang/go.etcd.io/etcd |
| 99 | golang | go.etcd.io/etcd/v3 | 8 | May 14, 2026 | pkg:golang/go.etcd.io/etcd/v3 |
| 100 | golang | chainguard.dev/apko | 7 | May 9, 2026 | pkg:golang/chainguard.dev/apko |
- golangApr 15, 2026pkg:golang/github.com/mattermost/mattermost/server/v8
- golangApr 15, 2026pkg:golang/github.com/mattermost/mattermost-server
- golangApr 20, 2026pkg:golang/github.com/usememos/memos
- golangMar 27, 2026pkg:golang/github.com/grafana/grafana
- golangApr 17, 2026pkg:golang/github.com/hashicorp/vault
- golangFeb 25, 2026pkg:golang/github.com/rancher/rancher
- golangMar 5, 2026pkg:golang/gogs.io/gogs
- golangNov 14, 2025pkg:golang/github.com/mattermost/mattermost-server/v6
- golangApr 24, 2026pkg:golang/github.com/siyuan-note/siyuan/kernel
- golangDec 14, 2025pkg:golang/k8s.io/kubernetes
- golangOct 1, 2025pkg:golang/github.com/argoproj/argo-cd/v2
- golangSep 7, 2023pkg:golang/github.com/answerdev/answer
- golangMar 20, 2026pkg:golang/github.com/zitadel/zitadel
- golangApr 30, 2026pkg:golang/github.com/traefik/traefik/v2
- golangJan 22, 2026pkg:golang/code.gitea.io/gitea
- golangApr 10, 2026pkg:golang/code.vikunja.io/api
- golangOct 1, 2025pkg:golang/github.com/argoproj/argo-cd
- golangMay 8, 2026pkg:golang/github.com/cilium/cilium
- golangMar 11, 2026pkg:golang/github.com/hashicorp/consul
- golangJun 11, 2025pkg:golang/github.com/hashicorp/nomad
- golangMar 31, 2026pkg:golang/github.com/docker/docker
- golangApr 7, 2026pkg:golang/github.com/filebrowser/filebrowser/v2
- golangApr 30, 2026pkg:golang/github.com/traefik/traefik/v3
- golangFeb 19, 2026pkg:golang/github.com/ethereum/go-ethereum
- golangMar 25, 2026pkg:golang/github.com/nats-io/nats-server/v2
- golangApr 22, 2026pkg:golang/github.com/openfga/openfga
- golangApr 9, 2026pkg:golang/helm.sh/helm/v3
- golangMar 23, 2026pkg:golang/github.com/goharbor/harbor
- golangMay 14, 2026pkg:golang/github.com/openbao/openbao
- golangMay 12, 2026pkg:golang/github.com/0xjacky/nginx-ui
- golangApr 16, 2025pkg:golang/golang.org/x/net
- golangJan 22, 2026pkg:golang/github.com/go-gitea/gitea
- golangApr 8, 2026pkg:golang/github.com/fleetdm/fleet/v4
- golangApr 10, 2026pkg:golang/github.com/juju/juju
- golangApr 30, 2026pkg:golang/github.com/traefik/traefik
- golangDec 10, 2025pkg:golang/github.com/1panel-dev/1panel
- golangNov 14, 2025pkg:golang/github.com/mattermost/mattermost-server/v5
- golangMar 19, 2026pkg:golang/k8s.io/ingress-nginx
- golangMay 4, 2026pkg:golang/github.com/ollama/ollama
- golangMay 5, 2026pkg:golang/github.com/coredns/coredns
- golangMay 14, 2026pkg:golang/github.com/gotenberg/gotenberg/v8
- golangApr 24, 2026pkg:golang/github.com/kyverno/kyverno
- golangMay 11, 2026pkg:golang/github.com/minio/minio
- golangNov 6, 2025pkg:golang/github.com/opencontainers/runc
- golangMar 7, 2026pkg:golang/github.com/zitadel/zitadel/v2
- golangApr 15, 2026pkg:golang/kubevirt.io/kubevirt
- golangNov 7, 2025pkg:golang/github.com/containerd/containerd
- golangMay 11, 2026pkg:golang/github.com/ellanetworks/core
- golangFeb 6, 2026pkg:golang/github.com/mattermost/mattermost-plugin-confluence
- golangJan 22, 2026pkg:golang/d7y.io/dragonfly/v2
- golangMay 9, 2026pkg:golang/github.com/argoproj/argo-workflows/v3
- golangApr 15, 2026pkg:golang/github.com/authzed/spicedb
- golangMar 25, 2026pkg:golang/github.com/nats-io/nats-server
- golangNov 19, 2025pkg:golang/golang.org/x/crypto
- golangApr 9, 2026pkg:golang/github.com/canonical/lxd
- golangApr 3, 2026pkg:golang/github.com/casdoor/casdoor
- golangAug 20, 2025pkg:golang/github.com/cri-o/cri-o
- golangApr 14, 2026pkg:golang/github.com/containers/podman/v4
- golangSep 17, 2025pkg:golang/github.com/dragonflyoss/dragonfly
- golangMar 10, 2026pkg:golang/github.com/envoyproxy/envoy
- golangMay 11, 2026pkg:golang/github.com/gofiber/fiber/v2
- golangMar 31, 2026pkg:golang/github.com/moby/moby
- golangFeb 4, 2026pkg:golang/github.com/navidrome/navidrome
- golangMar 11, 2026pkg:golang/github.com/olivetin/olivetin
- golangMay 7, 2026pkg:golang/istio.io/istio
- golangMar 31, 2025pkg:golang/github.com/beego/beego/v2
- golangMar 24, 2026pkg:golang/github.com/charmbracelet/soft-serve
- golangJan 19, 2026pkg:golang/github.com/filebrowser/filebrowser
- golangMar 13, 2026pkg:golang/github.com/forceu/gokapi
- golangFeb 17, 2024pkg:golang/github.com/greenpau/caddy-security
- golangApr 9, 2026pkg:golang/github.com/hashicorp/go-getter
- golangMay 7, 2026pkg:golang/github.com/lxc/incus/v6/cmd/incusd
- golangDec 17, 2025pkg:golang/github.com/mattermost/mattermost
- golangMay 4, 2026pkg:golang/github.com/patrickhener/goshs
- golangOct 2, 2024pkg:golang/github.com/pomerium/pomerium
- golangJan 19, 2026pkg:golang/github.com/pterodactyl/wings
- golangMar 7, 2026pkg:golang/github.com/tencent/weknora
- golangNov 22, 2024pkg:golang/github.com/apache/incubator-answer
- golangMar 31, 2025pkg:golang/github.com/beego/beego
- golangMar 31, 2026pkg:golang/github.com/bishopfox/sliver
- golangJan 29, 2025pkg:golang/github.com/cloudflare/cfrpki
- golangMay 12, 2026pkg:golang/github.com/esm-dev/esm.sh
- golangMay 11, 2026pkg:golang/github.com/go-git/go-git/v5
- golangApr 28, 2026pkg:golang/github.com/gravitl/netmaker
- golangMar 1, 2023pkg:golang/github.com/kubernetes/kubernetes
- golangApr 22, 2026pkg:golang/github.com/oauth2-proxy/oauth2-proxy/v7
- golangMay 28, 2021pkg:golang/github.com/sylabs/singularity
- golangApr 24, 2026pkg:golang/chainguard.dev/melange
- golangMay 9, 2026pkg:golang/github.com/argoproj/argo-workflows/v4
- golangFeb 24, 2026pkg:golang/github.com/caddyserver/caddy/v2
- golangMay 8, 2026pkg:golang/github.com/free5gc/udr
- golangJul 11, 2022pkg:golang/github.com/kubeedge/kubeedge
- golangMar 27, 2026pkg:golang/github.com/lxc/incus/v6
- golangJan 8, 2026pkg:golang/github.com/neuvector/neuvector
- golangMay 14, 2026pkg:golang/github.com/portainer/portainer
- golangApr 7, 2026pkg:golang/github.com/sigstore/cosign
- golangJun 18, 2024pkg:golang/github.com/stacklok/minder
- golangMay 14, 2026pkg:golang/go.etcd.io/etcd
- golangMay 14, 2026pkg:golang/go.etcd.io/etcd/v3
- golangMay 9, 2026pkg:golang/chainguard.dev/apko
Showing top 100 packages in golang by CVE count. Data union of GitHub Security Advisories + OSV.dev (refreshed every 15 min).