golang.org/x/vuln

New Issue

request govulncheck mark CVE's with severity levelvulncheck or vulndb

#70289 opened 1 week ago by aep-sunlife

SARIF format incorrect for zero resultsNeedsInvestigationvulncheck or vulndb

#70157 opened 2 weeks ago by cbandy

golang/govulncheck-action@v1 too hard to usevulncheck or vulndb

#69597 opened 1 month ago by kaihendry

vulnerabilities missing (go-reform analysis result)NeedsInvestigationvulncheck or vulndb

#69392 opened 2 months ago by realchs

Panic "cannot range over: func(yield func(K, V) bool) using golang 1.23.0vulncheck or vulndb

#68978 opened 3 months ago by weberr13

improve OpenVEX status output for fixed vulnerabilitiesNeedsInvestigationvulncheck or vulndb

#68338 opened 4 months ago by knqyf263

govulncheck very slow in CINeedsInvestigationvulncheck or vulndb

#68307 opened 4 months ago by kian99

TestStaticCheck failuresNeedsInvestigationvulncheck or vulndb

#68078 opened 5 months ago by gopherbot

package slices is not in GOROOTNeedsInvestigationvulncheck or vulndb

#68034 opened 5 months ago by bcl

TestMisspell failuresNeedsInvestigationvulncheck or vulndb

#67561 opened 6 months ago by gopherbot

unrecognized failuresNeedsInvestigationvulncheck or vulndb

#67291 opened 6 months ago by gopherbot

TestGoModTidy failuresNeedsInvestigationvulncheck or vulndb

#66997 opened 7 months ago by gopherbot

unexpected publishing latencyNeedsInvestigationvulncheck or vulndb

#66872 opened 7 months ago by stapelberg

is it possible check only the go.mod ?vulncheck or vulndb

#66590 opened 7 months ago by peczenyj

TestGovulncheck failuresNeedsInvestigationvulncheck or vulndb

#66319 opened 8 months ago by gopherbot

Vulnerability with Go 1.22 but I'm using 1.21.8WaitingForInfovulncheck or vulndb

#66301 opened 8 months ago by o-lee

invalid finding: if Frame.Function is set, Frame.Package must also beNeedsInvestigationvulncheck or vulndb

#66139 opened 8 months ago by zachgersh

govulncheck: panic on a nil types.ObjectNeedsInvestigationvulncheck or vulndb

#66130 opened 8 months ago by paoloteti

invalid memory address or nil pointer dereferenceWaitingForInfovulncheck or vulndb

#66025 opened 8 months ago by rd-codete

tests failing when upgrading x/vuln@v1.0.1->v1.0.4Toolsgopls

#65942 opened 8 months ago by findleyr

TestBashChecks failuresNeedsInvestigationvulncheck or vulndb

#65677 opened 9 months ago by gopherbot

govulncheck seg faults when used against project using 1.22.0vulncheck or vulndb

#65590 opened 9 months ago by elambert

How is this tool intended to be used in an air-gapped development environment?vulncheck or vulndb

#65230 opened 10 months ago by tpihl

Publish binaries & checksumsWaitingForInfovulncheck or vulndb

#65206 opened 10 months ago by mel1nn

go: -mod may only be set to readonly when in workspace mode, but it is set to "mod" error starting in 1.0.2vulncheck or vulndb

#65155 opened 10 months ago by ldemailly

govulncheck v1.0.2 json output content is different to regular output (dozens more false positives)vulncheck or vulndb

#65132 opened 10 months ago by inbarassaf

govulncheck v1.0.2 doesn't support workspaces anymorevulncheck or vulndb

#65130 opened 10 months ago by tinmrn

govulncheck doesn't support loading vendored modules vulncheck or vulndb

#65124 opened 10 months ago by lachlan-smith

govulncheck support `-hide-unused` in text modevulncheck or vulndb

#64970 opened 10 months ago by hitzhangjie

TestGovulncheck failures due to timeout dialing `vuln.go.dev`NeedsInvestigationvulncheck or vulndb

#64681 opened 11 months ago by gopherbot

Ignore found vulnerabilitiesvulncheck or vulndb

#64599 opened 11 months ago by gakesson

output only vulnerabilities with used codeWaitingForInfovulncheck or vulndb

#64556 opened 11 months ago by audunmo

TestGovulncheck failures with `loading modules: exit status 1`NeedsInvestigationvulncheck or vulndb

#64254 opened 1 year ago by gopherbot

FrozenDueToAgevulncheck or vulndb

#64182 opened 1 year ago by Alonekkpthpttall

panic: interface conversion: types.Type is *types.Interface, not *types.Tuplevulncheck or vulndb

#64112 opened 1 year ago by porridge

TestStaticCheck consistently failing on `longtest` builders as of CL 538765FrozenDueToAgevulncheck or vulndb

#63967 opened 1 year ago by bcmills

compute proper symbol name for generic methodsvulncheck or vulndb

#63535 opened 1 year ago by zpavlinovic

vmpuganeswaran5@gmail.com PuganeswaranA/LVADDIGOUNDER vulncheck or vulndb

#63377 opened 1 year ago by PuganeswaranALVaddigounder

vulnerability scan crashesNeedsInvestigationWaitingForInfovulncheck or vulndb

#63146 opened 1 year ago by whereswaldon

FrozenDueToAgevulncheck or vulndb

#62732 opened 1 year ago by chekitaderi17

how to troubleshoot HTTP 403FrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#62603 opened 1 year ago by udhos

vulncheck or vulndb

#62551 opened 1 year ago by NelsonSolis90

Add option to govulncheck to output VEX statementvulncheck or vulndb

#62486 opened 1 year ago by eliaslevy

FrozenDueToAgevulncheck or vulndb

#62468 opened 1 year ago by ThreatLEVELred

incorrect fix version reporting GO-2023-1987, GO-2023-2041FrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#62276 opened 1 year ago by notrobpike

FrozenDueToAgevulncheck or vulndb

#62184 opened 1 year ago by flaan4me

panic: in main.fn: cannot convert *t0 (any) to IFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#62089 opened 1 year ago by krhubert

FrozenDueToAgevulncheck or vulndb

#62058 opened 1 year ago by Youahui

0xDf9Eb223bAFBE5c5271415C75aeCD68C21fE3D7Fvulncheck or vulndb

#62000 opened 1 year ago by Kjholmes1

Binary mode not compatible with golang 1.21.0FrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#61936 opened 1 year ago by scottso

CVE Checkin - Update Request FrozenDueToAgevulncheck or vulndb

#61859 opened 1 year ago by juliross

do not recommend a release candidateFrozenDueToAgevulncheck or vulndb

#61812 opened 1 year ago by komuw

recommend stable releases onlyFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#61735 opened 1 year ago by Crystalix007

Treat fixes in unstable releases as warningsNeedsInvestigationWaitingForInfovulncheck or vulndb

#61729 opened 1 year ago by adapptor-kurt

json output always exits 0FrozenDueToAgeNeedsDecisionvulncheck or vulndb

#61704 opened 1 year ago by tendervittles

convert govulncheck output to sarif formatProposalProposal-Acceptedvulncheck or vulndb

#61347 opened 1 year ago by bradynpoulsen

Trojan:Win32/Randet.A!plock asm.exeFrozenDueToAgevulncheck or vulndb

#61339 opened 1 year ago by ayoubzulfiqar

whitespace issue between Go version and govulncheck versionFrozenDueToAgevulncheck or vulndb

#61330 opened 1 year ago by julieqiu

Missing output message when no vulnerabilities are foundFrozenDueToAgevulncheck or vulndb

#61328 opened 1 year ago by samstride

release version 1.0.0FrozenDueToAgeNeedsFixvulncheck or vulndb

#61202 opened 1 year ago by julieqiu

outdated govulncheck documentationDocumentationFrozenDueToAgevulncheck or vulndb

#61152 opened 1 year ago by dB2510

-v flag is not recognized in v0.2.0FrozenDueToAgeNeedsInvestigationSecurityvulncheck or vulndb

#61144 opened 1 year ago by chorin1

vulncheck or vulndb

#61141 opened 1 year ago by Sica17e

add support for stripped darwin binariesFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#61051 opened 1 year ago by zpavlinovic

govulncheck hangs when collecting stacks of all `runtime` usagesFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#60708 opened 1 year ago by karelbilek

TestStaticCheck failuresNeedsInvestigationvulncheck or vulndb

#60687 opened 1 year ago by gopherbot

make progress-like output opt-in for -json flagFrozenDueToAgeNeedsInvestigationWaitingForInfovulncheck or vulndb

#60497 opened 2 years ago by VirrageS

define format returned by -json flagFrozenDueToAgeWaitingForInfovulncheck or vulndb

#60496 opened 2 years ago by VirrageS

feature request: govulncheck needs a (-f json) format option to output valid JSON for CI/CD tools to make decisions on the flyFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#60207 opened 2 years ago by GeorgeDavis-TriumphTech

vulncheck or vulndb

#60191 opened 2 years ago by nanis94

provide default value for -test flagFrozenDueToAgeNeedsFixvulncheck or vulndb

#60166 opened 2 years ago by julieqiu

release version v0.2.0FrozenDueToAgeNeedsFixvulncheck or vulndb

#60165 opened 2 years ago by julieqiu

rename -show=stacks to -show=tracesFrozenDueToAgevulncheck or vulndb

#60115 opened 2 years ago by julieqiu

panic if Cmd.Start is not calledFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#60014 opened 2 years ago by julieqiu

verify replace directives workFrozenDueToAgevulncheck or vulndb

#60013 opened 2 years ago by tatianab

crash on large reposFrozenDueToAgeNeedsInvestigationWaitingForInfovulncheck or vulndb

#59966 opened 2 years ago by Dafaque

update fixed version to take in account multiple modulesFrozenDueToAgevulncheck or vulndb

#59931 opened 2 years ago by julieqiu

replace `go mod tidy` in checks.bash with TestGoModTidyvulncheck or vulndb

#59871 opened 2 years ago by julieqiu

handle unhandled errorsFrozenDueToAgevulncheck or vulndb

#59853 opened 2 years ago by julieqiu

update JSON output to split OSV and findingsFrozenDueToAgevulncheck or vulndb

#59834 opened 2 years ago by julieqiu

move callstacks output from -v to -show=stacksFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59833 opened 2 years ago by julieqiu

linker errors in tests on Android buildersFrozenDueToAgeNeedsInvestigationOS-Androidvulncheck or vulndb

#59769 opened 2 years ago by gopherbot

"panic: interface conversion: types.Type is *types.Interface, not *types.Array"FrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59754 opened 2 years ago by alexeykiselev

wrap output of GoEnv in sync.OnceFrozenDueToAgeNeedsFixvulncheck or vulndb

#59747 opened 2 years ago by julieqiu

add unit tests for runSource and runBinaryvulncheck or vulndb

#59746 opened 2 years ago by tatianab

optimize Client.ByModulesFrozenDueToAgevulncheck or vulndb

#59745 opened 2 years ago by tatianab

exit with status 2 when relevantFrozenDueToAgeNeedsFixvulncheck or vulndb

#59744 opened 2 years ago by julieqiu

export internal/scan.CommandFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59742 opened 2 years ago by julieqiu

fix TestCommandStrip on darwinFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59732 opened 2 years ago by julieqiu

improve vulnerability checking when PCLN table is not available but buildinfo isNeedsInvestigationvulncheck or vulndb

#59731 opened 2 years ago by julieqiu

change vulncheck.Source to take a single FileSetFrozenDueToAgeNeedsFixvulncheck or vulndb

#59729 opened 2 years ago by julieqiu

format -mode=binary errorFrozenDueToAgevulncheck or vulndb

#59700 opened 2 years ago by julieqiu

provide a user-friendly error when there are errors loading packagesFrozenDueToAgevulncheck or vulndb

#59699 opened 2 years ago by julieqiu

remove unaffected symbols from json output in binary modeFrozenDueToAgevulncheck or vulndb

#59698 opened 2 years ago by julieqiu

display affected symbols in for binary mode in default modeFrozenDueToAgevulncheck or vulndb

#59697 opened 2 years ago by julieqiu

dedupe symbols in callstack for binary modeFrozenDueToAgevulncheck or vulndb

#59696 opened 2 years ago by julieqiu

add tests for binary modeFrozenDueToAgevulncheck or vulndb

#59693 opened 2 years ago by julieqiu

release version v0.1.0FrozenDueToAgeNeedsFixvulncheck or vulndb

#59686 opened 2 years ago by julieqiu

add support for colored text outputFrozenDueToAgevulncheck or vulndb

#59681 opened 2 years ago by julieqiu

ignore directory when there are no buildable Go filesFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59633 opened 2 years ago by rminnich

improve error message when running on invalid pattern FrozenDueToAgeNeedsFixvulncheck or vulndb

#59623 opened 2 years ago by julieqiu

change JSON output of token.Position to be snake caseFrozenDueToAgevulncheck or vulndb

#59620 opened 2 years ago by julieqiu

add Cmd.EnvFrozenDueToAgevulncheck or vulndb

#59619 opened 2 years ago by julieqiu

remove package path from receiverFrozenDueToAgevulncheck or vulndb

#59618 opened 2 years ago by julieqiu

remove summary and symbol from callstacksFrozenDueToAgevulncheck or vulndb

#59617 opened 2 years ago by julieqiu

fix handling of build tags for govulncheckFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59607 opened 2 years ago by rminnich

add support for transforming JSON to text FrozenDueToAgeNeedsFixvulncheck or vulndb

#59552 opened 2 years ago by julieqiu

add support for querying module@versionFrozenDueToAgeNeedsFixvulncheck or vulndb

#59551 opened 2 years ago by julieqiu

fix integration tests in cmd/govulncheck/integrationFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59486 opened 2 years ago by julieqiu

migrate govulncheck to v1 database schemaFrozenDueToAgevulncheck or vulndb

#59439 opened 2 years ago by tatianab

1234334vulncheck or vulndb

#59376 opened 2 years ago by RasstAdonai

repostoryvulncheck or vulndb

#59353 opened 2 years ago by shark696969

govulncheck has broken output for only stdlib vulnsFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#59323 opened 2 years ago by bitcynth

add tests for invalid govulncheck flagsFrozenDueToAgeNeedsFixvulncheck or vulndb

#59139 opened 2 years ago by julieqiu

vulncheck or vulndb

#58969 opened 2 years ago by hellotypefor

Govulncheck not detecting known vulnerability in Golang dependenciesFrozenDueToAgeNeedsInvestigationWaitingForInfovulncheck or vulndb

#58757 opened 2 years ago by mohammadv184

possible missed x/crypto vulnerability in govulncheck?FrozenDueToAgevulncheck or vulndb

#58752 opened 2 years ago by taisph

vuln/cmd/govulncheck missing install instructions on pkgsiteDocumentationFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#58253 opened 2 years ago by maceonthompson

go.mod file depend on module have `// indirect` suffix which should need to analyze?FrozenDueToAgevulncheck or vulndb

#57831 opened 2 years ago by tarihub

error "no symbol "go.func.*"" scanning Debian binariesFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#57764 opened 2 years ago by hickford

Does not use the correct GOPATH: Index(): mkdir /pkg: permission deniedFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#57406 opened 2 years ago by evanj

optimization opportunitiesvulncheck or vulndb

#57357 opened 2 years ago by adonovan

VULNERABILITY CWE-347 CVE-2020-9283 CVSS 8.6 HIGH SNYK-GOLANG-GOLANGORGXCRYPTOSSH-551923FrozenDueToAgevulncheck or vulndb

#57318 opened 2 years ago by Trilokkumar1

Cannot install govulncheck anymore since yesterdayFrozenDueToAgevulncheck or vulndb

#57189 opened 2 years ago by nphmuller

govulncheck panic: interface conversion: types.Type is *types.Interface, not *types.ArrayFrozenDueToAgevulncheck or vulndb

#57174 opened 2 years ago by sixcolors

tests consistently failing on Android builders due to missing "compile" tool starting 2022-11-02FrozenDueToAgeNeedsFixOS-AndroidTestingvulncheck or vulndbx/vuln

#57147 opened 2 years ago by bcmills

Package files not found for modules containing capital lettersFrozenDueToAgevulncheck or vulndb

#56996 opened 2 years ago by peterebden

Test failuresNeedsInvestigationvulncheck or vulndb

#56956 opened 2 years ago by gopherbot

vulncheck or vulndb

#56926 opened 2 years ago by marks199

Failing in CircleCI (Linux) but not on macosFrozenDueToAgevulncheck or vulndb

#56855 opened 2 years ago by ardan-bkennedy

skip one line of codeFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#56767 opened 2 years ago by sten4eg

golvuncheck ./... should recurse through _all_ sub directories.FrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#56715 opened 2 years ago by glycerine

panic: runtime error: invalid memory address or nil pointer dereference with golang.org/x/vuln@v0.0.0-20221109205719-3af8368ee4fe/cmd/govulncheck/print.go:40 +0x3fFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#56689 opened 2 years ago by jerome-laforge

add flag to provide actionable govulncheck fixesFeatureRequestFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#56569 opened 2 years ago by el10savio

missing --versionFrozenDueToAgevulncheck or vulndb

#56514 opened 2 years ago by ldemailly

govulncheck ./... ate all available memory and got killedFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#56391 opened 2 years ago by zak-pawel

https://pkg.go.dev/vuln/GO-2021-0356 shows the affected symbol twiceFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#56229 opened 2 years ago by hyangah

Show which packages are being scannedFrozenDueToAgeNeedsFixUXvulncheck or vulndb

#56101 opened 2 years ago by fflewddur

create exp/govulncheck and update cmd/govulncheck to use internal/govulncheckFrozenDueToAgeNeedsFixvulncheck or vulndb

#56042 opened 2 years ago by julieqiu

govulncheck command not available after adding the packageFrozenDueToAgeWaitingForInfovulncheck or vulndb

#55981 opened 2 years ago by aleybovich

add credit field to OSV reportsFrozenDueToAgeNeedsFixvulncheck or vulndb

#55956 opened 2 years ago by julieqiu

govulncheck does not match when using vulnerable symbolFrozenDueToAgevulncheck or vulndb

#55937 opened 2 years ago by iainduncani

https://github.com/golang/go/issues/38736#issue-608691699FrozenDueToAgevulncheck or vulndbx/vuln

#55143 opened 2 years ago by Al-KAHF

respect GOPRIVATE env variableFrozenDueToAgeNeedsDecisionvulncheck or vulndbx/vuln

#55105 opened 2 years ago by ArtAndreev

GetByModule for a local source client breaks standard library pages on pkgsiteNeedsInvestigationWaitingForInfovulncheck or vulndbx/vuln

#55088 opened 2 years ago by jamalc

reports vulnerability for unrelated Go versionFrozenDueToAgevulncheck or vulndbx/vuln

#55049 opened 2 years ago by szuecs

vulncheck should not surface vulnerabilities in fixed versionFrozenDueToAgevulncheck or vulndbx/vuln

#55046 opened 2 years ago by tatianab

govulncheck is confused when go command version doesn't match that used to build itFrozenDueToAgevulncheck or vulndb

#55045 opened 2 years ago by neild

Cannot handle multiple "fixed" events on vulns.jsonFrozenDueToAgevulncheck or vulndb

#55035 opened 2 years ago by mrkschan

govulncheck reports "undeclared name" for global variable declared in _test.go fileFrozenDueToAgeUnfortunatevulncheck or vulndb

#55016 opened 2 years ago by derat

Panics regularlyFrozenDueToAgevulncheck or vulndbx/vuln

#54995 opened 2 years ago by klauern

Unclear how to request standard-library vulnerabilities be added to DBFrozenDueToAgevulncheck or vulndb

#54985 opened 2 years ago by rkennedy

500 error for excluded reportsFrozenDueToAgepkgsitevulncheck or vulndb

#54981 opened 2 years ago by willfaught

govulncheck reports no vulnerabilities while deps.dev reports two vulnsFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#54970 opened 2 years ago by thediveo

govulncheck ./... takes ~36minsFrozenDueToAgeNeedsInvestigationPerformanceWaitingForInfovulncheck or vulndb

#54940 opened 2 years ago by mattcobb

enhancing community involvement for GHSAFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#54937 opened 2 years ago by bnevis-i

incorrect version is suggested as a fixed version for a vulnerability with multiple packagesFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#54913 opened 2 years ago by hyangah

fails to run in monorepo with non-go programming language filesFrozenDueToAgeNeedsInvestigationWaitingForInfovulncheck or vulndb

#54895 opened 2 years ago by lbhdc

FrozenDueToAgevulncheck or vulndb

#54848 opened 2 years ago by julieqiu

FrozenDueToAge

#54847 opened 2 years ago by julieqiu

read goos/goarch from binary instead of current environmentFrozenDueToAgevulncheck or vulndb

#54844 opened 2 years ago by zpavlinovic

govulncheck should report vulnerabilities for all GOOS/GOARCH values FrozenDueToAgeNeedsFixvulncheck or vulndb

#54841 opened 2 years ago by jba

states that the vulnerability is fixed in a previous major release of Go, not that it's fixed in a later minor releaseFrozenDueToAgeNeedsFixvulncheck or vulndb

#54401 opened 2 years ago by a-h

govulncheck prints confusing/wrong output for reports with no fixFrozenDueToAgevulncheck or vulndb

#53822 opened 2 years ago by neild

allow filtering for private modulesFeatureRequestFrozenDueToAgeNeedsInvestigationvulncheck or vulndb

#53224 opened 2 years ago by julieqiu

vuln DB should report its last-modified timeFeatureRequestFrozenDueToAgeNeedsFixvulncheck or vulndb

#51735 opened 2 years ago by jba

separate worker and client into different modulesFrozenDueToAgevulncheck or vulndb

#50247 opened 2 years ago by julieqiu

Test failing on multiple builders due to undeclared dependencies fetched from the networkFrozenDueToAgeNeedsInvestigationokay-after-beta1release-blockervulncheck or vulndb

#50163 opened 2 years ago by bcmills

Test failing on android, js, and plan9 due to missing check for "bash" executableFrozenDueToAgeNeedsFixokay-after-beta1release-blockervulncheck or vulndb

#50162 opened 2 years ago by bcmills

move CI to kokoroFrozenDueToAgevulncheck or vulndb

#50026 opened 2 years ago by julieqiu

add option to cmd/cvetriage to read from an existing CVEProject/cvelist repo FrozenDueToAgeNeedsFixvulncheck or vulndb

#49291 opened 3 years ago by julieqiu

link JSON reports to the HTML pageFrozenDueToAgeNeedsFixvulncheck or vulndb

#49271 opened 3 years ago by julieqiu