Go Vulnerability Management

This repository contains packages for accessing and analyzing data from the Go Vulnerability Database. It contains the following:

• Package client: a client for interacting with the Go vulnerability database
• Package vulncheck: an API for detecting vulnerabilities in Go packages
• Command govulncheck: a CLI for detecting vulnerabilities in Go packages

Check out https://go.dev/security/vuln for more information about the Go vulnerability management system.

Privacy Policy

The privacy policy for govulncheck can be found at https://vuln.go.dev/privacy.

License

Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.

Database entries available at https://vuln.go.dev are distributed under the terms of the CC-BY 4.0 license.