Go vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-8063Highgithub.com/ollama/ollama: Ollama Divide by Zero Vulnerability CVE-2024-12886Highgithub.com/ollama/ollama: Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIP CVE-2024-12055Highgithub.com/ollama/ollama: Ollama Allows Out-of-Bounds Read CVE-2024-7631Mediumgithub.com/openshift/console: OpenShift Console Has a Path Traversal Vulnerability CVE-2024-25132Mediumgithub.com/openshift/hive: OpenShift Hive Has an Uncontrolled Resource Consumption Vulnerability CVE-2025-30153Highgithub.com/getkin/kin-openapi: Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter CVE-2025-1472Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost Fails to Properly Perform Viewer Role Authorization CVE-2025-0495Mediumgithub.com/docker/buildx: buildx allows a possible credential leakage to telemetry endpoint CVE-2025-29786Highgithub.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input CVE-2025-29781Mediumgithub.com/metal3-io/baremetal-operator/apis: Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD CVE-2024-40635Mediumgithub.com/containerd/containerd/v2: containerd has an integer overflow in User ID handling CVE-2025-2241Highgithub.com/openshift/hive: Openshift Hive Exposes VCenter Credentials via ClusterProvision CVE-2025-30077Mediumgithub.com/onosproject/onos-lib-go: onos-lib-go allows an index out-of-range panic CVE-2025-1767Mediumk8s.io/kubernetes: Kubernetes GitRepo Volume Inadvertent Local Repository Access CVE-2024-9042Mediumk8s.io/kubernetes: Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API GHSA-H2RP-8VPX-Q9R4Criticalgithub.com/cheqd/cheqd-node: cheqd-node Security patch for upstream vulnerabilities in IBC-Go (ISA-2025-001) and Cosmos SDK (ISA-2025-002)CVE-2025-22870Mediumgolang.org/x/net: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net GHSA-4WF3-5QJ9-368VCriticalgithub.com/cosmos/ibc-go: IBC-Go: Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt GHSA-47WW-FF84-4JRGHighgithub.com/cosmos/cosmos-sdk: Cosmos SDK: x/group can halt when erroring in EndBlocker GHSA-33CR-M232-XQCHCriticalgithub.com/cheqd/cheqd-node: cheqd-node affected by Non-deterministic JSON Unmarshalling of IBC Acknowledgement CVE-2025-27403Highgithub.com/ratify-project/ratify: Ratify Azure authentication providers can leak authentication tokens to non-Azure container registries CVE-2025-27616Highgithub.com/go-vela/server: Vela Server Has Insufficient Webhook Payload Data Verification CVE-2024-52812Mediumgithub.com/lf-edge/ekuiper/v2: LF Edge eKuiper allows Stored XSS in Rules Functionality CVE-2025-1296Mediumgithub.com/hashicorp/nomad: Nomad is vulnerable to unintentional exposure of the workload identity token and client secret token in audit logs GHSA-6WXF-7784-62FPHighgithub.com/strangelove-ventures/horcrux/v3: Horcrux Double Sign Possibility

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.