golang.org/x/vuln

New Issue

TestGoModTidy failuresNeedsInvestigationvulncheck or vulndb

#66997 opened 3 weeks ago by gopherbot

unexpected publishing latencyNeedsInvestigationvulncheck or vulndb

#66872 opened 1 month ago by stapelberg

is it possible check only the go.mod ?vulncheck or vulndb

#66590 opened 1 month ago by peczenyj

Vulnerability with Go 1.22 but I'm using 1.21.8WaitingForInfovulncheck or vulndb

#66301 opened 2 months ago by o-lee

invalid finding: if Frame.Function is set, Frame.Package must also beNeedsInvestigationvulncheck or vulndb

#66139 opened 2 months ago by zachgersh

govulncheck: panic on a nil types.ObjectNeedsInvestigationvulncheck or vulndb

#66130 opened 2 months ago by paoloteti

invalid memory address or nil pointer dereferenceWaitingForInfovulncheck or vulndb

#66025 opened 2 months ago by rd-codete

tests failing when upgrading x/vuln@v1.0.1->v1.0.4Toolsgopls

#65942 opened 2 months ago by findleyr

govulncheck seg faults when used against project using 1.22.0vulncheck or vulndb

#65590 opened 3 months ago by elambert

How is this tool intended to be used in an air-gapped development environment?vulncheck or vulndb

#65230 opened 3 months ago by tpihl

Publish binaries & checksumsWaitingForInfovulncheck or vulndb

#65206 opened 3 months ago by mel1nn

go: -mod may only be set to readonly when in workspace mode, but it is set to "mod" error starting in 1.0.2vulncheck or vulndb

#65155 opened 4 months ago by ldemailly

govulncheck v1.0.2 json output content is different to regular output (dozens more false positives)vulncheck or vulndb

#65132 opened 4 months ago by inbarassaf

govulncheck v1.0.2 doesn't support workspaces anymorevulncheck or vulndb

#65130 opened 4 months ago by tinmrn

govulncheck doesn't support loading vendored modules vulncheck or vulndb

#65124 opened 4 months ago by lachlan-smith

govulncheck support `-hide-unused` in text modevulncheck or vulndb

#64970 opened 4 months ago by hitzhangjie

TestGovulncheck failures due to timeout dialing `vuln.go.dev`NeedsInvestigationvulncheck or vulndb

#64681 opened 5 months ago by gopherbot

Ignore found vulnerabilitiesvulncheck or vulndb

#64599 opened 5 months ago by gakesson

output only vulnerabilities with used codeWaitingForInfovulncheck or vulndb

#64556 opened 5 months ago by audunmo

TestGovulncheck failures with `loading modules: exit status 1`NeedsInvestigationvulncheck or vulndb

#64254 opened 6 months ago by gopherbot

vulncheck or vulndb

#64182 opened 6 months ago by Alonekkpthpttall

panic: interface conversion: types.Type is *types.Interface, not *types.Tuplevulncheck or vulndb

#64112 opened 6 months ago by porridge

TestStaticCheck consistently failing on `longtest` builders as of CL 538765vulncheck or vulndb

#63967 opened 6 months ago by bcmills

compute proper symbol name for generic methodsvulncheck or vulndb

#63535 opened 7 months ago by zpavlinovic

vmpuganeswaran5@gmail.com PuganeswaranA/LVADDIGOUNDER vulncheck or vulndb

#63377 opened 7 months ago by PuganeswaranALVaddigounder

vulnerability scan crashesNeedsInvestigationWaitingForInfovulncheck or vulndb

#63146 opened 8 months ago by whereswaldon

vulncheck or vulndb

#62732 opened 8 months ago by chekitaderi17

how to troubleshoot HTTP 403NeedsInvestigationvulncheck or vulndb

#62603 opened 8 months ago by udhos

vulncheck or vulndb

#62551 opened 8 months ago by NelsonSolis90

vulncheck or vulndb

#62468 opened 8 months ago by ThreatLEVELred

incorrect fix version reporting GO-2023-1987, GO-2023-2041NeedsInvestigationvulncheck or vulndb

#62276 opened 8 months ago by notrobpike

vulncheck or vulndb

#62184 opened 9 months ago by flaan4me

panic: in main.fn: cannot convert *t0 (any) to INeedsInvestigationvulncheck or vulndb

#62089 opened 9 months ago by krhubert

vulncheck or vulndb

#62058 opened 9 months ago by Youahui

0xDf9Eb223bAFBE5c5271415C75aeCD68C21fE3D7Fvulncheck or vulndb

#62000 opened 9 months ago by Kjholmes1

Binary mode not compatible with golang 1.21.0NeedsInvestigationvulncheck or vulndb

#61936 opened 9 months ago by scottso

CVE Checkin - Update Request vulncheck or vulndb

#61859 opened 9 months ago by juliross

do not recommend a release candidatevulncheck or vulndb

#61812 opened 9 months ago by komuw

recommend stable releases onlyNeedsInvestigationvulncheck or vulndb

#61735 opened 9 months ago by Crystalix007

Treat fixes in unstable releases as warningsNeedsInvestigationWaitingForInfovulncheck or vulndb

#61729 opened 9 months ago by adapptor-kurt

json output always exits 0NeedsDecisionvulncheck or vulndb

#61704 opened 9 months ago by tendervittles

Trojan:Win32/Randet.A!plock asm.exevulncheck or vulndb

#61339 opened 10 months ago by ayoubzulfiqar

whitespace issue between Go version and govulncheck versionvulncheck or vulndb

#61330 opened 10 months ago by julieqiu

Missing output message when no vulnerabilities are foundvulncheck or vulndb

#61328 opened 10 months ago by samstride

release version 1.0.0NeedsFixvulncheck or vulndb

#61202 opened 10 months ago by julieqiu

outdated govulncheck documentationDocumentationvulncheck or vulndb

#61152 opened 10 months ago by dB2510

-v flag is not recognized in v0.2.0NeedsInvestigationSecurityvulncheck or vulndb

#61144 opened 10 months ago by chorin1

vulncheck or vulndb

#61141 opened 10 months ago by Sica17e

add support for stripped darwin binariesNeedsInvestigationvulncheck or vulndb

#61051 opened 10 months ago by zpavlinovic

govulncheck hangs when collecting stacks of all `runtime` usagesNeedsInvestigationvulncheck or vulndb

#60708 opened 11 months ago by karelbilek

make progress-like output opt-in for -json flagNeedsInvestigationWaitingForInfovulncheck or vulndb

#60497 opened 11 months ago by VirrageS

define format returned by -json flagWaitingForInfovulncheck or vulndb

#60496 opened 11 months ago by VirrageS

feature request: govulncheck needs a (-f json) format option to output valid JSON for CI/CD tools to make decisions on the flyFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#60207 opened 1 year ago by GeorgeDavis-TriumphTech

vulncheck or vulndb

#60191 opened 1 year ago by nanis94

provide default value for -test flagNeedsFixvulncheck or vulndb

#60166 opened 1 year ago by julieqiu

release version v0.2.0NeedsFixvulncheck or vulndb

#60165 opened 1 year ago by julieqiu

rename -show=stacks to -show=tracesFrozenDueToAgevulncheck or vulndb

#60115 opened 1 year ago by julieqiu

panic if Cmd.Start is not calledFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#60014 opened 1 year ago by julieqiu

verify replace directives workvulncheck or vulndb

#60013 opened 1 year ago by tatianab

crash on large reposNeedsInvestigationWaitingForInfovulncheck or vulndb

#59966 opened 1 year ago by Dafaque

update fixed version to take in account multiple modulesFrozenDueToAgevulncheck or vulndb

#59931 opened 1 year ago by julieqiu

replace `go mod tidy` in checks.bash with TestGoModTidyvulncheck or vulndb

#59871 opened 1 year ago by julieqiu

handle unhandled errorsFrozenDueToAgevulncheck or vulndb

#59853 opened 1 year ago by julieqiu

update JSON output to split OSV and findingsFrozenDueToAgevulncheck or vulndb

#59834 opened 1 year ago by julieqiu

move callstacks output from -v to -show=stacksFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59833 opened 1 year ago by julieqiu

linker errors in tests on Android buildersFrozenDueToAgeNeedsInvestigationOS-Androidvulncheck or vulndb

#59769 opened 1 year ago by gopherbot

"panic: interface conversion: types.Type is *types.Interface, not *types.Array"FrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59754 opened 1 year ago by alexeykiselev

wrap output of GoEnv in sync.OnceNeedsFixvulncheck or vulndb

#59747 opened 1 year ago by julieqiu

add unit tests for runSource and runBinaryvulncheck or vulndb

#59746 opened 1 year ago by tatianab

optimize Client.ByModulesFrozenDueToAgevulncheck or vulndb

#59745 opened 1 year ago by tatianab

exit with status 2 when relevantFrozenDueToAgeNeedsFixvulncheck or vulndb

#59744 opened 1 year ago by julieqiu

export internal/scan.CommandFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59742 opened 1 year ago by julieqiu

fix TestCommandStrip on darwinNeedsInvestigationvulncheck or vulndb

#59732 opened 1 year ago by julieqiu

improve vulnerability checking when PCLN table is not available but buildinfo isNeedsInvestigationvulncheck or vulndb

#59731 opened 1 year ago by julieqiu

change vulncheck.Source to take a single FileSetNeedsFixvulncheck or vulndb

#59729 opened 1 year ago by julieqiu

format -mode=binary errorFrozenDueToAgevulncheck or vulndb

#59700 opened 1 year ago by julieqiu

provide a user-friendly error when there are errors loading packagesFrozenDueToAgevulncheck or vulndb

#59699 opened 1 year ago by julieqiu

remove unaffected symbols from json output in binary modeFrozenDueToAgevulncheck or vulndb

#59698 opened 1 year ago by julieqiu

display affected symbols in for binary mode in default modeFrozenDueToAgevulncheck or vulndb

#59697 opened 1 year ago by julieqiu

dedupe symbols in callstack for binary modeFrozenDueToAgevulncheck or vulndb

#59696 opened 1 year ago by julieqiu

add tests for binary modeFrozenDueToAgevulncheck or vulndb

#59693 opened 1 year ago by julieqiu

release version v0.1.0NeedsFixvulncheck or vulndb

#59686 opened 1 year ago by julieqiu

add support for colored text outputFrozenDueToAgevulncheck or vulndb

#59681 opened 1 year ago by julieqiu

ignore directory when there are no buildable Go filesNeedsInvestigationvulncheck or vulndb

#59633 opened 1 year ago by rminnich

improve error message when running on invalid pattern NeedsFixvulncheck or vulndb

#59623 opened 1 year ago by julieqiu

change JSON output of token.Position to be snake caseFrozenDueToAgevulncheck or vulndb

#59620 opened 1 year ago by julieqiu

add Cmd.Envvulncheck or vulndb

#59619 opened 1 year ago by julieqiu

remove package path from receiverFrozenDueToAgevulncheck or vulndb

#59618 opened 1 year ago by julieqiu

remove summary and symbol from callstacksFrozenDueToAgevulncheck or vulndb

#59617 opened 1 year ago by julieqiu

fix handling of build tags for govulncheckFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59607 opened 1 year ago by rminnich

add support for transforming JSON to text FrozenDueToAgeNeedsFixvulncheck or vulndb

#59552 opened 1 year ago by julieqiu

add support for querying module@versionFrozenDueToAgeNeedsFixvulncheck or vulndb

#59551 opened 1 year ago by julieqiu

fix integration tests in cmd/govulncheck/integrationFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59486 opened 1 year ago by julieqiu

migrate govulncheck to v1 database schemaFrozenDueToAgevulncheck or vulndb

#59439 opened 1 year ago by tatianab

1234334vulncheck or vulndb

#59376 opened 1 year ago by RasstAdonai

repostoryvulncheck or vulndb

#59353 opened 1 year ago by shark696969

govulncheck has broken output for only stdlib vulnsFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59323 opened 1 year ago by bitcynth

add tests for invalid govulncheck flagsFrozenDueToAgeNeedsFixvulncheck or vulndb

#59139 opened 1 year ago by julieqiu

vulncheck or vulndb

#58969 opened 1 year ago by hellotypefor

Govulncheck not detecting known vulnerability in Golang dependenciesFrozenDueToAgeNeedsInvestigationWaitingForInfovulncheck or vulndb

#58757 opened 1 year ago by mohammadv184

possible missed x/crypto vulnerability in govulncheck?FrozenDueToAgevulncheck or vulndb

#58752 opened 1 year ago by taisph

vuln/cmd/govulncheck missing install instructions on pkgsiteDocumentationNeedsInvestigationvulncheck or vulndb

#58253 opened 1 year ago by maceonthompson

go.mod file depend on module have `// indirect` suffix which should need to analyze?FrozenDueToAgevulncheck or vulndb

#57831 opened 1 year ago by tarimoe

error "no symbol "go.func.*"" scanning Debian binariesFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#57764 opened 1 year ago by hickford

Does not use the correct GOPATH: Index(): mkdir /pkg: permission deniedFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#57406 opened 1 year ago by evanj

VULNERABILITY CWE-347 CVE-2020-9283 CVSS 8.6 HIGH SNYK-GOLANG-GOLANGORGXCRYPTOSSH-551923FrozenDueToAgevulncheck or vulndb

#57318 opened 1 year ago by Trilokkumar1

Cannot install govulncheck anymore since yesterdayFrozenDueToAgevulncheck or vulndb

#57189 opened 1 year ago by nphmuller

govulncheck panic: interface conversion: types.Type is *types.Interface, not *types.ArrayFrozenDueToAgevulncheck or vulndb

#57174 opened 1 year ago by sixcolors

tests consistently failing on Android builders due to missing "compile" tool starting 2022-11-02FrozenDueToAgeNeedsFixOS-AndroidTestingvulncheck or vulndbx/vuln

#57147 opened 1 year ago by bcmills

Package files not found for modules containing capital lettersFrozenDueToAgevulncheck or vulndb

#56996 opened 1 year ago by peterebden

Test failuresNeedsInvestigationvulncheck or vulndb

#56956 opened 1 year ago by gopherbot

vulncheck or vulndb

#56926 opened 2 years ago by marks199

Failing in CircleCI (Linux) but not on macosFrozenDueToAgevulncheck or vulndb

#56855 opened 2 years ago by ardan-bkennedy

skip one line of codeFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#56767 opened 2 years ago by sten4eg

golvuncheck ./... should recurse through _all_ sub directories.FrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#56715 opened 2 years ago by glycerine

panic: runtime error: invalid memory address or nil pointer dereference with golang.org/x/vuln@v0.0.0-20221109205719-3af8368ee4fe/cmd/govulncheck/print.go:40 +0x3fFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#56689 opened 2 years ago by jerome-laforge

add flag to provide actionable govulncheck fixesFeatureRequestFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#56569 opened 2 years ago by el10savio

missing --versionFrozenDueToAgevulncheck or vulndb

#56514 opened 2 years ago by ldemailly

govulncheck ./... ate all available memory and got killedFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#56391 opened 2 years ago by zak-pawel

https://pkg.go.dev/vuln/GO-2021-0356 shows the affected symbol twiceFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#56229 opened 2 years ago by hyangah

Show which packages are being scannedFrozenDueToAgeNeedsFixUXvulncheck or vulndb

#56101 opened 2 years ago by fflewddur

create exp/govulncheck and update cmd/govulncheck to use internal/govulncheckFrozenDueToAgeNeedsFixvulncheck or vulndb

#56042 opened 2 years ago by julieqiu

govulncheck command not available after adding the packageFrozenDueToAgeWaitingForInfovulncheck or vulndb

#55981 opened 2 years ago by aleybovich

add credit field to OSV reportsFrozenDueToAgeNeedsFixvulncheck or vulndb

#55956 opened 2 years ago by julieqiu

govulncheck does not match when using vulnerable symbolFrozenDueToAgevulncheck or vulndb

#55937 opened 2 years ago by iainduncani

https://github.com/golang/go/issues/38736#issue-608691699FrozenDueToAgevulncheck or vulndbx/vuln

#55143 opened 2 years ago by Al-KAHF

respect GOPRIVATE env variableFrozenDueToAgeNeedsDecisionvulncheck or vulndbx/vuln

#55105 opened 2 years ago by ArtAndreev

GetByModule for a local source client breaks standard library pages on pkgsiteNeedsInvestigationWaitingForInfovulncheck or vulndbx/vuln

#55088 opened 2 years ago by jamalc

reports vulnerability for unrelated Go versionFrozenDueToAgevulncheck or vulndbx/vuln

#55049 opened 2 years ago by szuecs

vulncheck should not surface vulnerabilities in fixed versionFrozenDueToAgevulncheck or vulndbx/vuln

#55046 opened 2 years ago by tatianab

govulncheck is confused when go command version doesn't match that used to build itFrozenDueToAgevulncheck or vulndb

#55045 opened 2 years ago by neild

Cannot handle multiple "fixed" events on vulns.jsonFrozenDueToAgevulncheck or vulndb

#55035 opened 2 years ago by mrkschan

govulncheck reports "undeclared name" for global variable declared in _test.go fileFrozenDueToAgeUnfortunatevulncheck or vulndb

#55016 opened 2 years ago by derat

Panics regularlyFrozenDueToAgevulncheck or vulndbx/vuln

#54995 opened 2 years ago by klauern

Unclear how to request standard-library vulnerabilities be added to DBFrozenDueToAgevulncheck or vulndb

#54985 opened 2 years ago by rkennedy

500 error for excluded reportsFrozenDueToAgepkgsitevulncheck or vulndb

#54981 opened 2 years ago by willfaught

govulncheck reports no vulnerabilities while deps.dev reports two vulnsFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#54970 opened 2 years ago by thediveo

govulncheck ./... takes ~36minsFrozenDueToAgeNeedsInvestigationPerformanceWaitingForInfovulncheck or vulndb

#54940 opened 2 years ago by mattcobb

enhancing community involvement for GHSAFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#54937 opened 2 years ago by bnevis-i

incorrect version is suggested as a fixed version for a vulnerability with multiple packagesFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#54913 opened 2 years ago by hyangah

fails to run in monorepo with non-go programming language filesFrozenDueToAgeNeedsInvestigationWaitingForInfovulncheck or vulndb

#54895 opened 2 years ago by lbhdc

FrozenDueToAgevulncheck or vulndb

#54848 opened 2 years ago by julieqiu

FrozenDueToAge

#54847 opened 2 years ago by julieqiu

read goos/goarch from binary instead of current environmentFrozenDueToAgevulncheck or vulndb

#54844 opened 2 years ago by zpavlinovic

govulncheck should report vulnerabilities for all GOOS/GOARCH values FrozenDueToAgeNeedsFixvulncheck or vulndb

#54841 opened 2 years ago by jba

states that the vulnerability is fixed in a previous major release of Go, not that it's fixed in a later minor releaseFrozenDueToAgeNeedsFixvulncheck or vulndb

#54401 opened 2 years ago by a-h

govulncheck prints confusing/wrong output for reports with no fixFrozenDueToAgevulncheck or vulndb

#53822 opened 2 years ago by neild

allow filtering for private modulesFeatureRequestNeedsInvestigationvulncheck or vulndb

#53224 opened 2 years ago by julieqiu

vuln DB should report its last-modified timeFeatureRequestFrozenDueToAgeNeedsFixvulncheck or vulndb

#51735 opened 2 years ago by jba

separate worker and client into different modulesFrozenDueToAgevulncheck or vulndb

#50247 opened 2 years ago by julieqiu

Test failing on multiple builders due to undeclared dependencies fetched from the networkFrozenDueToAgeNeedsInvestigationokay-after-beta1release-blockervulncheck or vulndb

#50163 opened 2 years ago by bcmills

Test failing on android, js, and plan9 due to missing check for "bash" executableFrozenDueToAgeNeedsFixokay-after-beta1release-blockervulncheck or vulndb

#50162 opened 2 years ago by bcmills

move CI to kokoroFrozenDueToAgevulncheck or vulndb

#50026 opened 2 years ago by julieqiu

add option to cmd/cvetriage to read from an existing CVEProject/cvelist repo FrozenDueToAgeNeedsFixvulncheck or vulndb

#49291 opened 2 years ago by julieqiu

link JSON reports to the HTML pageFrozenDueToAgeNeedsFixvulncheck or vulndb

#49271 opened 2 years ago by julieqiu