Go vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-52900Mediumgithub.com/filebrowser/filebrowser/v2: filebrowser Sets Insecure File Permissions CVE-2025-4656Lowgithub.com/hashicorp/vault: Vault Community Edition rekey and recovery key operations can cause denial of service CVE-2025-52894Mediumgithub.com/openbao/openbao: OpenBao allows cancellation of root rekey and recovery rekey operations without authentication CVE-2025-52893Mediumgithub.com/openbao/openbao/sdk/v2: OpenBao Inserts Sensitive Information into Log File when processing malformed data CVE-2025-52890Highgithub.com/lxc/incus/v6: Incus creates nftables rules that partially bypass security options CVE-2025-52889Lowgithub.com/lxc/incus/v6: Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks CVE-2025-52477Highgithub.com/octo-sts/app: Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens CVE-2025-47943Mediumgithub.com/gogs/gogs: Gogs XSS allowed by stored call in PDF renderer CVE-2025-6624Lowsnyk: Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode CVE-2025-6032Highgithub.com/containers/podman/v5: Podman Improper Certificate Validation; machine missing TLS verification CVE-2024-56731Criticalgogs.io/gogs: Gogs allows deletion of internal files which leads to remote command execution CVE-2025-4563Lowk8s.io/kubernetes: kubernetes allows nodes to bypass dynamic resource allocation authorization checks GHSA-VRW8-FXC6-2R93Mediumgithub.com/go-chi/chi/v5: chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes CVE-2025-3227Mediumgithub.com/mattermost/mattermost-server: Mattermost allows unauthorized channel member management through playbook runs CVE-2025-3228Mediumgithub.com/mattermost/mattermost-server: Mattermost allows an unauthorized Guest user access to Playbook CVE-2025-4981Criticalgithub.com/mattermost/mattermost-server: Mattermost allows authenticated users to write files to arbitrary locations CVE-2025-6264Mediumwww.velocidex.com/golang/velociraptor: Velociraptor vulnerable to privilege escalation via UpdateConfig artifact CVE-2025-1088Lowgithub.com/grafana/grafana: Grafana long dashboard title or panel name causes unresponsives CVE-2025-5981Mediumgithub.com/google/osv-scalibr: OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal CVE-2025-49825Criticalgithub.com/gravitational/teleport: Teleport allows remote authentication bypass CVE-2025-5689Mediumgithub.com/ubuntu/authd: New authd users logging in via SSH are members of the root group CVE-2024-44906Mediumgithub.com/uptrace/bun/driver/pgdriver: uptrace pgdriver SQL injection vulnerability CVE-2024-44905Mediumgithub.com/go-pg/pg/v9: go-pg SQL injection vulnerability via the component /types/append_value.go CVE-2025-4922Highgithub.com/hashicorp/nomad: Hashicorp Nomad Incorrect Privilege Assignment vulnerability GHSA-79XG-Q4QM-7V9WHighgithub.com/CosmWasm/wasmd: CWA-2025-006: wasmd's improper error handling may lead to IBC channel opening despite error

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.