CVE Tools
Track your stack

Go

3,289 CVEs across 107 months on the top 200 list since May 2014. Peak rank #3 in Feb 2026. 6 of them are now in CISA KEV.

Go CVEs per month since May 2014

Dec 2021 to Nov 2026 in the lens. Point at a month to read it, or drag the frame to move through the record.Tallest in the lens: 143, Feb 2026
Dec 2021: 13 CVEs · 0 critical · 1 now in CISA KEV · rank #45 · mostly Github.com/grafana/grafana, Github.com/opencontainers/runc, Github.com/foxcpp/maddyJan 2022: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #60 · mostly Github.com/authzed/spicedb, Github.com/casdoor/casdoor, Github.com/containerd/containerdFeb 2022: 47 CVEs · 5 critical · 0 now in CISA KEV · rank #18 · mostly Github.com/go-gitea/gitea, Github.com/hashicorp/nomad, Github.com/google/fscryptMar 2022: 36 CVEs · 5 critical · 0 now in CISA KEV · rank #23 · mostly Gogs.io/gogs, Code.gitea.io/gitea, Github.com/argoproj/argo-cdApr 2022: 24 CVEs · 2 critical · 0 now in CISA KEV · rank #29 · mostly Github.com/mattermost/mattermost-server/v6, Github.com/rancher/rancher, Github.com/beego/beegoMay 2022: 44 CVEs · 6 critical · 0 now in CISA KEV · rank #18 · mostly Github.com/hashicorp/go-getter/gcs/v2, Github.com/hashicorp/go-getter, Github.com/rancher/rancherJun 2022: 29 CVEs · 6 critical · 0 now in CISA KEV · rank #26 · mostly Gogs.io/gogs, Github.com/argoproj/argo-cd, Github.com/argoproj/argo-cd/v2Jul 2022: 25 CVEs · 2 critical · 0 now in CISA KEV · rank #30 · mostly Github.com/kubeedge/kubeedge, Github.com/argoproj/argo-cd, Github.com/grafana/grafanaAug 2022: 15 CVEs · 0 critical · 0 now in CISA KEV · rank #51 · mostly Github.com/crypto-org-chain/cronos, Github.com/cilium/cilium, Code.gitea.io/giteaSep 2022: 47 CVEs · 6 critical · 0 now in CISA KEV · rank #19 · mostly Github.com/rancher/rancher, Github.com/grafana/grafana, Github.com/elrondnetwork/elrond-goOct 2022: 32 CVEs · 5 critical · 0 now in CISA KEV · rank #34 · mostly Github.com/grafana/grafana, Github.com/openfga/openfga, Go.etcd.io/etcd/client/v3Nov 2022: 34 CVEs · 8 critical · 0 now in CISA KEV · rank #22 · mostly Github.com/ibax-io/go-ibax, Github.com/grafana/grafana, Github.com/hashicorp/nomadDec 2022: 126 CVEs · 15 critical · 0 now in CISA KEV · rank #7 · mostly Github.com/usememos/memos, Helm.sh/helm/v3, Github.com/alist-org/alist/v3Jan 2023: 33 CVEs · 2 critical · 0 now in CISA KEV · rank #20 · mostly Github.com/usememos/memos, Github.com/kubeoperator/kubepi, Www.velocidex.com/golang/velociraptorFeb 2023: 44 CVEs · 10 critical · 0 now in CISA KEV · rank #18 · mostly Github.com/answerdev/answer, Github.com/rancher/rancher, Github.com/pion/dtls/v2Mar 2023: no snapshot, the run for this month failedApr 2023: 26 CVEs · 3 critical · 0 now in CISA KEV · rank #32 · mostly Github.com/docker/docker, Github.com/bnb-chain/tss-lib, Github.com/binance-chain/tss-libMay 2023: 35 CVEs · 4 critical · 0 now in CISA KEV · rank #19 · mostly Github.com/kyverno/kyverno, Github.com/sigstore/rekor, Github.com/pydio/cellsJun 2023: 42 CVEs · 4 critical · 0 now in CISA KEV · rank #14 · mostly Github.com/grafana/grafana, Github.com/rancher/rancher, Github.com/cosmos/cosmos-sdkJul 2023: 30 CVEs · 3 critical · 0 now in CISA KEV · rank #28 · mostly Github.com/1panel-dev/1panel, Github.com/hashicorp/nomad, K8s.io/kubernetesAug 2023: 37 CVEs · 0 critical · 0 now in CISA KEV · rank #24 · mostly Github.com/answerdev/answer, Github.com/mattermost/mattermost-server/v6, Github.com/gravitl/netmakerSep 2023: 64 CVEs · 6 critical · 1 now in CISA KEV · rank #11 · mostly Github.com/lf-edge/eve, Github.com/schollz/croc/v9, Github.com/mattermost/mattermost/server/v8Oct 2023: 44 CVEs · 1 critical · 1 now in CISA KEV · rank #19 · mostly Github.com/arduino/arduino-create-agent, K8s.io/kubernetes, Github.com/nats-io/nats-server/v2Nov 2023: 37 CVEs · 3 critical · 0 now in CISA KEV · rank #17 · mostly Github.com/mattermost/mattermost/server/v8, Github.com/mattermost/mattermost-server/v6, Github.com/projectcapsule/capsule-proxyDec 2023: 32 CVEs · 1 critical · 0 now in CISA KEV · rank #25 · mostly Github.com/traefik/traefik/v3, Github.com/mattermost/mattermost/server/v8, Github.com/traefik/traefik/v2Jan 2024: 46 CVEs · 5 critical · 0 now in CISA KEV · rank #18 · mostly Github.com/cubefs/cubefs, Github.com/0xjacky/nginx-ui, Github.com/moby/buildkitFeb 2024: 52 CVEs · 2 critical · 0 now in CISA KEV · rank #18 · mostly Github.com/mattermost/mattermost/server/v8, Github.com/greenpau/caddy-security, Github.com/apache/incubator-answerMar 2024: 53 CVEs · 6 critical · 0 now in CISA KEV · rank #19 · mostly Github.com/argoproj/argo-cd/v2, Github.com/zitadel/zitadel, Github.com/cilium/ciliumApr 2024: 64 CVEs · 3 critical · 0 now in CISA KEV · rank #19 · mostly Github.com/mattermost/mattermost-server, Github.com/mattermost/mattermost/server/v8, Github.com/alexxit/go2rtcMay 2024: 45 CVEs · 2 critical · 0 now in CISA KEV · rank #34 · mostly Github.com/stacklok/minder, Github.com/layer5io/meshery, Github.com/snapcore/snapdJun 2024: 33 CVEs · 3 critical · 0 now in CISA KEV · rank #22 · mostly Github.com/evmos/evmos/v14, Github.com/evmos/evmos/v16, Github.com/evmos/evmos/v17Jul 2024: 49 CVEs · 9 critical · 0 now in CISA KEV · rank #19 · mostly Github.com/gogs/gogs, Gogs.io/gogs, Github.com/snapcore/snapdAug 2024: 62 CVEs · 4 critical · 0 now in CISA KEV · rank #13 · mostly Github.com/mattermost/mattermost/server/v8, Github.com/mattermost/mattermost, Github.com/cosmwasm/wasmdSep 2024: 40 CVEs · 6 critical · 0 now in CISA KEV · rank #16 · mostly Github.com/nvidia/nvidia-container-toolkit, Github.com/zitadel/zitadel/v2, Github.com/hashicorp/vaultOct 2024: 65 CVEs · 4 critical · 0 now in CISA KEV · rank #16 · mostly Github.com/rancher/rancher, Github.com/juju/juju, Github.com/mattermost/mattermost/server/v8Nov 2024: 42 CVEs · 5 critical · 0 now in CISA KEV · rank #23 · mostly Github.com/goharbor/harbor, Github.com/moby/moby, Github.com/drakkan/sftpgo/v2Dec 2024: 39 CVEs · 5 critical · 0 now in CISA KEV · rank #19 · mostly Github.com/siyuan-note/siyuan/kernel, Github.com/mattermost/mattermost/server/v8, Github.com/cosmwasm/wasmvmJan 2025: 49 CVEs · 3 critical · 0 now in CISA KEV · rank #22 · mostly Github.com/mattermost/mattermost/server/v8, Github.com/t2bot/matrix-media-repo, Github.com/kubewarden/kubewarden-controllerFeb 2025: 35 CVEs · 7 critical · 1 now in CISA KEV · rank #21 · mostly Github.com/mattermost/mattermost/server/v8, Github.com/mayswind/ezbookkeeping, Github.com/clidey/whodb/coreMar 2025: 60 CVEs · 5 critical · 0 now in CISA KEV · rank #18 · mostly Github.com/mattermost/mattermost/server/v8, Github.com/ollama/ollama, K8s.io/ingress-nginxApr 2025: 56 CVEs · 7 critical · 0 now in CISA KEV · rank #16 · mostly Github.com/mattermost/mattermost/server/v8, Github.com/rancher/rancher, Github.com/osrg/gobgp/v3May 2025: 50 CVEs · 11 critical · 0 now in CISA KEV · rank #18 · mostly Github.com/mattermost/mattermost/server/v8, Github.com/zitadel/zitadel, Github.com/gardener/gardenerJun 2025: 50 CVEs · 4 critical · 0 now in CISA KEV · rank #19 · mostly Github.com/filebrowser/filebrowser/v2, Github.com/mattermost/mattermost/server/v8, Github.com/mattermost/mattermost-serverJul 2025: 34 CVEs · 7 critical · 0 now in CISA KEV · rank #32 · mostly Github.com/mattermost/mattermost/server/v8, Github.com/lf-edge/ekuiper/v2, Github.com/mattermost/mattermost-serverAug 2025: 75 CVEs · 6 critical · 0 now in CISA KEV · rank #11 · mostly Github.com/mattermost/mattermost-plugin-confluence, Github.com/mattermost/mattermost/server/v8, Github.com/mattermost/mattermost-serverSep 2025: 55 CVEs · 11 critical · 0 now in CISA KEV · rank #18 · mostly D7y.io/dragonfly/v2, Github.com/dragonflyoss/dragonfly, Github.com/mattermost/mattermost/server/v8Oct 2025: 60 CVEs · 4 critical · 0 now in CISA KEV · rank #18 · mostly Github.com/mattermost/mattermost/server/v8, Github.com/canonical/lxd, Github.com/mattermost/mattermost-serverNov 2025: 70 CVEs · 5 critical · 0 now in CISA KEV · rank #9 · mostly Github.com/mattermost/mattermost/server/v8, Github.com/mattermost/mattermost-server, Kubevirt.io/kubevirtDec 2025: 83 CVEs · 6 critical · 1 now in CISA KEV · rank #9 · mostly Code.gitea.io/gitea, Github.com/mattermost/mattermost/server/v8, Github.com/mattermost/mattermostJan 2026: 85 CVEs · 11 critical · 0 now in CISA KEV · rank #8 · mostly Github.com/go-gitea/gitea, Github.com/siyuan-note/siyuan/kernel, Github.com/axllent/mailpitFeb 2026: 143 CVEs · 20 critical · 0 now in CISA KEV · rank #3 · mostly Gogs.io/gogs, Github.com/mattermost/mattermost-server, Code.vikunja.io/apiMar 2026: 139 CVEs · 19 critical · 0 now in CISA KEV · rank #7 · mostly Github.com/siyuan-note/siyuan/kernel, Github.com/olivetin/olivetin, Github.com/forceu/gokapiApr 2026: 62 CVEs · 0 critical · 0 now in CISA KEV · rank #13 · mostly Github.com/lin-snow/ech0, Github.com/patrickhener/goshs/v2, Github.com/kyverno/kyvernoMay 2026: 41 CVEs · 0 critical · 0 now in CISA KEV · rank #29 · mostly Github.com/lin-snow/ech0, Github.com/kong/kubernetes-ingress-controller/v3, Github.com/metal3-io/ironic-standalone-operatorJun 2026: 35 CVEs · 0 critical · 0 now in CISA KEV · rank #25 · mostly Github.com/klever-io/klever-go, Github.com/gohugoio/hugo, Github.com/go-chi/chi/v5/middlewareJul 2026: 31 CVEs · 0 critical · 0 now in CISA KEV · rank #30 · mostly Github.com/tinfoil-factory/netfoil, Github.com/openlistteam/openlist/v4, Github.com/jandedobbeleer/oh-my-poshAug 2026: 46 CVEs · 0 critical · 0 now in CISA KEV · rank #26 · mostly Github.com/siyuan-note/siyuan/kernel, Github.com/rclone/rclone, Github.com/coder/coder/v2Sep 2026: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #175 · mostly Github.com/siyuan-note/siyuan/kernel, Github.com/obot-platform/obot, Github.com/falcosecurity/plugins/plugins/k8saudit-gkeOct 2026: 43 CVEs · 0 critical · 0 now in CISA KEV · rank #39 · mostly Code.vikunja.io/api, Github.com/corazawaf/coraza/v3, Github.com/siyuan-note/siyuan/kernelNov 2026: none that month (the list had room for every one)

In the lens

The products that kept showing up in Go's monthly top three from Dec 2021 to Nov 2026. Move the lens and the list follows.

  1. Github.com/mattermost/mattermost/server/v814920 months
  2. Github.com/siyuan-note/siyuan/kernel576 months
  3. Github.com/usememos/memos542 months
  4. Github.com/mattermost/mattermost-server477 months
  5. Github.com/rancher/rancher337 months
  6. Gogs.io/gogs274 months
  7. Github.com/mattermost/mattermost-server/v6203 months
  8. Github.com/grafana/grafana176 months
  9. Code.vikunja.io/api162 months
  10. Github.com/lf-edge/eve141 month

Year by year

Each year's months on the top 200 list. Pick a year to read it in the lens.

The record

Peak rank
#3 in Feb 2026
Busiest month
Feb 2026, 143 CVEs
Months with a KEV entry
6 of 107 on the list
On the top 200 list
107 of 133 monthly snapshots

Each monthly snapshot keeps the top 200 vendors by CVEs. A month below the cut shows the most it could have had: the smallest count that made the list. 18 months have no snapshot because the run failed.

MethodologyAll months on recordThe Go hub