Go vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-53971Lowgithub.com/mattermost/mattermost-server: Mattermost Fails to Properly Validate Team Role Modification CVE-2025-36530Mediumgithub.com/mattermost/mattermost-server: Mattermost Fails to Validate File Paths CVE-2025-4437Mediumgithub.com/cri-o/cri-o: CRI-O has Potential High Memory Consumption from File Read CVE-2025-55740Mediumgithub.com/Anipaleja/nginx-defender: Default Credentials in nginx-defender Configuration Files GHSA-QP7J-X725-G67FCriticalgithub.com/hydraide/hydraide: HydrAIDE Authentication Bypass Vulnerability CVE-2025-55213Mediumgithub.com/openfga/openfga: OpenFGA Authorization Bypass CVE-2025-55205Criticalgithub.com/projectcapsule/capsule: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label CVE-2025-8959Highgithub.com/hashicorp/go-getter: HashiCorp go-getter Vulnerable to Symlink Attacks CVE-2025-9039Mediumgithub.com/aws/amazon-ecs-agent: Information Disclosure in Amazon ECS Container Agent CVE-2025-55198Mediumhelm.sh/helm/v3: Helm May Panic Due To Incorrect YAML Content CVE-2025-55199Mediumhelm.sh/helm/v3: Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion CVE-2025-55196Highgithub.com/external-secrets/external-secrets: External Secrets Operator's Missing Namespace Restriction Allows Unauthorized Secret Access CVE-2025-50946Highgithub.com/OliveTin/OliveTin: OliveTin OS Command Injection vulnerability GHSA-JHMR-57CJ-Q6G9Highgithub.com/komari-monitor/komari: Komari vulnerable to 2FA Authentication Bypass GHSA-Q355-H244-969HHighgithub.com/komari-monitor/komari: Komari vulnerable to Cross-site WebSocket Hijacking CVE-2025-54478Mediumgithub.com/mattermost/mattermost-plugin-confluence: Mattermost Confluence Plugin is Missing Authentication for Critical Function CVE-2025-8285Mediumgithub.com/mattermost/mattermost-plugin-confluence: Mattermost Confluence Plugin has Missing Authorization vulnerability CVE-2025-54463Mediumgithub.com/mattermost/mattermost-plugin-confluence: Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions CVE-2025-53910Mediumgithub.com/mattermost/mattermost-plugin-confluence: Mattermost Confluence Plugin has Missing Authorization vulnerability CVE-2025-54525Highgithub.com/mattermost/mattermost-plugin-confluence: Mattermost Confluence Plugin has Improper Validation of Specified Type of Input CVE-2025-53514Mediumgithub.com/mattermost/mattermost-plugin-confluence: Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions CVE-2025-53857Lowgithub.com/mattermost/mattermost-plugin-confluence: Mattermost Confluence Plugin has Missing Authorization vulnerability CVE-2025-54458Mediumgithub.com/mattermost/mattermost-plugin-confluence: Mattermost Confluence Plugin has Missing Authorization vulnerability CVE-2025-52931Highgithub.com/mattermost/mattermost-plugin-confluence: Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions CVE-2025-48731Mediumgithub.com/mattermost/mattermost-plugin-confluence: Mattermost Confluence Plugin has Missing Authorization vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo