Go2373 advisories

Go security advisories

Most-affected Go packages

github.com/mattermost/mattermost-server — 107 advisories
github.com/siyuan-note/siyuan/kernel — 76 advisories
github.com/mattermost/mattermost/server/v8 — 75 advisories
code.vikunja.io/api — 57 advisories
code.gitea.io/gitea — 41 advisories
gogs.io/gogs — 39 advisories
github.com/fleetdm/fleet/v4 — 39 advisories
github.com/traefik/traefik/v2 — 36 advisories
github.com/traefik/traefik/v3 — 36 advisories
github.com/filebrowser/filebrowser/v2 — 33 advisories
stdlib — 29 advisories
github.com/nats-io/nats-server/v2 — 28 advisories
github.com/mattermost/mattermost-server/v5 — 27 advisories
github.com/mattermost/mattermost-server/v6 — 27 advisories
github.com/traefik/traefik — 26 advisories
github.com/nats-io/nats-server — 25 advisories
github.com/OliveTin/OliveTin — 24 advisories
github.com/zitadel/zitadel — 23 advisories
github.com/ellanetworks/core — 23 advisories
github.com/gotenberg/gotenberg/v8 — 21 advisories

Latest Go advisories

GHSA-q7j3-v8qv-22vq — high · Go/github.com/opentofu/opentofu
GHSA-2h46-9x5w-4wf7 — medium · Go/github.com/entireio/cli
CVE-2026-55689 — medium · Go/github.com/openfga/openfga
CVE-2026-55884 — critical · Go/github.com/tilt-dev/tilt
CVE-2026-55883 — high · Go/github.com/tilt-dev/tilt
CVE-2026-55882 — high · Go/github.com/tilt-dev/tilt
CVE-2026-54319 — medium · Go/github.com/daytonaio/daytona
CVE-2026-11719 — high · Go/github.com/googleapis/mcp-toolbox
CVE-2026-11718 — critical · Go/github.com/googleapis/mcp-toolbox
CVE-2026-11717 — critical · Go/github.com/googleapis/mcp-toolbox
CVE-2026-55701 — medium · Go/github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver
CVE-2026-47256 — medium · Go/github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter
CVE-2026-55686 — medium · Go/github.com/containers/podman/v3
CVE-2026-55686 — medium · Go/github.com/containers/podman/v4
CVE-2026-55686 — medium · Go/github.com/containers/podman/v5
GHSA-4jgr-pg2m-m988 — high · Go/github.com/dadrus/heimdall
GHSA-38x9-25wx-7fg2 — high · Go/https://github.com/dadrus/heimdall
CVE-2026-55669 — medium · Go/github.com/zitadel/zitadel
GHSA-wxg7-w2v3-w38g — medium · Go/github.com/zitadel/zitadel
CVE-2026-55672 — high · Go/github.com/zitadel/zitadel
CVE-2026-55887 — high · Go/github.com/docker/mcp-gateway
CVE-2026-55229 — high · Go/github.com/gotenberg/gotenberg/v8
CVE-2026-55636 — medium · Go/github.com/projectcapsule/capsule
CVE-2026-25779 — medium · Go/github.com/go-gitea/gitea
CVE-2026-28737 — high · Go/code.gitea.io/gitea
CVE-2026-24791 — high · Go/code.gitea.io/gitea
CVE-2026-22555 — high · Go/code.gitea.io/gitea
CVE-2026-54324 — medium · Go/github.com/daytonaio/daytona
CVE-2026-54761 — medium · Go/github.com/traefik/traefik
CVE-2026-54761 — medium · Go/github.com/traefik/traefik/v2
CVE-2026-54761 — medium · Go/github.com/traefik/traefik/v3
CVE-2026-44981 — medium · Go/github.com/crowdsecurity/crowdsec
CVE-2026-54094 — medium · Go/github.com/filebrowser/filebrowser/v2
CVE-2026-54094 — medium · Go/github.com/filebrowser/filebrowser
CVE-2026-30963 — medium · Go/github.com/projectcapsule/capsule
CVE-2026-47243 — medium · Go/github.com/kata-containers/kata-containers
CVE-2026-48113 — medium · Go/github.com/jpillora/chisel
CVE-2026-47725 — medium · Go/github.com/juev/nebula-mesh
CVE-2026-20706 — medium · Go/code.gitea.io/gitea
CVE-2026-27783 — medium · Go/code.gitea.io/gitea

Stateward audits your Go dependencies on every pull request and only flags what your code reaches.

Scan my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.