PkgRadar

Go modules · proxy.golang.org

cosmossdk.io

Shell Credential File Read, Go Cgo Preamble

Why PkgRadar flagged v0.0.0-20260505183107-046046a6731d

SeveritySignalEvidence
highShell Credential File Read

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260505183107-046046a6731dHigh risk452026-06-28
v0.0.0-20250429182637-bcaf7378adfbHigh risk452026-06-28
v0.12.1-0.20240830124619-24401543bdafLow risk02026-06-22
v0.12.1-0.20240829090022-17d864f6c0a7Low risk02026-06-20
v0.12.1-0.20240829083205-1bbeb9c6fa35Low risk02026-06-20
v0.12.1-0.20240829065759-78de1a2549acLow risk02026-06-20
v0.54.0-rc.1.0.20260616181550-24fb5ffc033aLow risk02026-06-17
v0.0.0-20260616181550-24fb5ffc033aLow risk02026-06-17
v0.0.0-20260616153504-4be5f86f585cLow risk02026-06-17
v0.54.0-rc.1.0.20260615182402-c591a9f80acaLow risk02026-06-16
v0.0.0-20260615182402-c591a9f80acaLow risk02026-06-16
v0.54.0-rc.1.0.20260615141908-5f1d8655aa42Low risk02026-06-16
v0.0.0-20260612154506-67c529ab310aLow risk02026-06-13
v0.54.0-rc.1.0.20260612154506-67c529ab310aLow risk02026-06-13
v0.0.0-20260612151527-49c5533a8dbcLow risk02026-06-13
v0.54.0-rc.1.0.20260609153854-0b6929187c76Low risk02026-06-10
v0.54.0-rc.1.0.20260608160940-97a4ee0f5441Low risk02026-06-09
v0.0.0-20260608160940-97a4ee0f5441Low risk02026-06-09
v0.12.1-0.20240828184240-89ec787f7ef2Low risk02026-06-09
v0.12.1-0.20240828155422-43fa816a1effLow risk02026-06-09
v0.12.1-0.20240828172628-8ca94d9acb90Low risk02026-06-09
v0.12.1-0.20240828081436-01abf4fbf92cLow risk02026-06-09
v0.54.0-rc.1.0.20260605195734-e57dc5eeb163Low risk02026-06-06
v0.0.0-20260605195734-e57dc5eeb163Low risk02026-06-06
v0.54.0-rc.1.0.20260605142003-71efc78ae647Low risk02026-06-06
v0.0.0-20260605142003-71efc78ae647Low risk02026-06-06
v0.54.0-rc.1.0.20260605010014-89836e061d81Low risk02026-06-06
v0.0.0-20260605010014-89836e061d81Low risk02026-06-06
v0.54.0-rc.1.0.20260604203845-443b17e55366Low risk02026-06-05
v0.0.0-20260604203845-443b17e55366Low risk02026-06-05
v0.54.0-rc.1.0.20260604182445-06363342bf7aLow risk02026-06-05
v0.0.0-20260604182445-06363342bf7aLow risk02026-06-05
v0.12.1-0.20240827125122-f0c0e8154f5fLow risk02026-06-04
v0.12.1-0.20240827112247-8e0efbdff9c6Low risk02026-06-04
v0.0.0-20260602153612-1236be839aa3Low risk02026-06-03
v0.54.0-rc.1.0.20260601182506-18c5737148bdLow risk02026-06-02
v0.0.0-20260601182506-18c5737148bdLow risk02026-06-02
v0.0.0-20260601174552-9b890520e933Low risk02026-06-02
v0.54.0-rc.1.0.20260601153223-34084104107aLow risk02026-06-02
v0.0.0-20260601153223-34084104107aLow risk02026-06-02
v0.12.1-0.20240827034552-8dd69484ff8eLow risk02026-06-01
v0.12.1-0.20240826140124-19e0de5e0aabLow risk02026-06-01
v0.12.1-0.20240826100755-28c792bcd06cLow risk02026-06-01
v0.12.1-0.20240826075044-59e0a3d6be31Low risk02026-06-01
v0.4.1-0.20241213164504-256ec4f90277Low risk02026-06-01
v0.0.0-20260528185115-ebb120a1b5a8Low risk02026-05-29

Block this in CI

PkgRadar gates cosmossdk.io (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go [email protected]
cosmossdk.io — Go modules security scan | PkgRadar