Go vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-56323Mediumgithub.com/openfga/openfga: OpenFGA Authorization Bypass CVE-2024-56138Mediumgithub.com/notaryproject/notation-go: notation-go's timestamp signature generation lacks certificate revocation check CVE-2024-51491Lowgithub.com/notaryproject/notation-go: notation-go has an OS error when setting CRL cache leads to denial of signature verification CVE-2025-22149Lowgithub.com/MicahParks/jwkset: JWK Set's HTTP client only overwrites and appends JWK to local cache during refresh CVE-2025-22449Lowgithub.com/mattermost/mattermost/server/v8: Mattermost Incorrect Authorization vulnerability CVE-2025-20033Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost Improper Validation of Specified Type of Input vulnerability CVE-2025-22445Lowgithub.com/mattermost/mattermost/server/v8: Mattermost has Improper Check for Unusual or Exceptional Conditions CVE-2025-22130Mediumgithub.com/charmbracelet/soft-serve: Soft Serve vulnerable to path traversal attacks GHSA-2R2V-9PF8-6342Highgithub.com/h44z/wg-portal: WireGuard Portal v2 Vulnerable to OAuth Insecure Redirect URI / Account Takeover CVE-2025-21614Highgopkg.in/src-d/go-git.v4: go-git clients vulnerable to DoS via maliciously crafted Git server replies CVE-2025-21613Criticalgopkg.in/src-d/go-git.v4: go-git has an Argument Injection via the URL field CVE-2025-21609Highgithub.com/siyuan-note/siyuan/kernel: SiYuan has an arbitrary file deletion vulnerability CVE-2024-56514Mediumgithub.com/karmada-io/karmada: Karmada Tar Slips in CRDs archive extraction CVE-2024-56513Highgithub.com/karmada-io/karmada: Karmada PULL Mode Cluster Privilege Escalation CVE-2024-25133Highgithub.com/openshift/hive: OpenShift Hive RCE through AWS/Kubernetes client configuration leads to privilege escalation CVE-2024-39930Criticalgogs.io/gogs: Gogs has an argument Injection in the built-in SSH server CVE-2024-39932Criticalgogs.io/gogs: Gogs allows argument injection during the previewing of changes CVE-2024-39931Criticalgogs.io/gogs: Gogs allows deletion of internal files CVE-2024-39933Highgogs.io/gogs: Gogs allows argument Injection when tagging new releases CVE-2024-56362Highgithub.com/navidrome/navidrome: Navidrome Stores JWT Secret in Plaintext in navidrome.db CVE-2024-45387Highgithub.com/apache/trafficcontrol/v8: SQL injection in Apache Traffic Control CVE-2024-55947Highgogs.io/gogs: Path Traversal in file update API in gogs CVE-2024-54148Highgogs.io/gogs: Remote Command Execution in file editing in gogs CVE-2024-28892Criticalgithub.com/mayuresh82/gocast: GoCast OS Command Injection vulnerability CVE-2024-12678Mediumgithub.com/hashicorp/nomad: Hashicorp Nomad Incorrect Privilege Assignment vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.