Go vulnerabilities
5,123 vulnerabilities and 20 malicious packages in Go. github.com/mattermost/mattermost-server has the most reviewed advisories.
Most exploited Go vulnerabilities
- CVE-2025-24016 Wazuh Server Deserialization of Untrusted Data
- CVE-2026-60004 Gitea Code Injection
- CVE-2021-39226 Grafana Authentication Bypass
- CVE-2026-33634 Aquasecurity Trivy Embedded Malicious Code
- CVE-2023-4863 Google Chromium WebP Heap-Based Buffer Overflow
- CVE-2023-28434 MinIO Security Feature Bypass
- CVE-2025-8110 Gogs Path Traversal
- CVE-2020-0601 Microsoft Windows CryptoAPI Spoofing
- CVE-2023-44487 HTTP/2 Rapid Reset Attack
- CVE-2021-43798 Grafana Path Traversal
- CVE-2026-94603 Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation
- CVE-2026-54735 prebid-server's request forgery vulnerability allows for possible host environment data extraction
Go packages with the most advisories
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.