Loading the latest scan…
Go modules · proxy.golang.org
Shipped Live Secret, Tls Verification Disabled, Remote Payload +2 more
Why PkgRadar flagged v2.28.1-0.20260714132005-5bb2909d48fa
| Severity | Signal | Evidence |
|---|---|---|
| high | Shipped Live Secret | — |
| medium | Tls Verification Disabled | — |
| medium | Remote Payload | — |
| medium | Remote Payload | — |
| medium | Tls Verification Disabled | — |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v2.28.1-0.20260714132005-5bb2909d48fa | High risk | 98 | 2026-07-16 |
v2.28.0 | High risk | 98 | 2026-07-16 |
v2.27.2-0.20260603154852-9addc97cefc9 | Low risk | 0 | 2026-06-05 |
v2.27.0 | Low risk | 0 | 2026-06-05 |
v2.27.2-0.20260601185311-92ed8df32846 | Low risk | 0 | 2026-06-04 |
v2.27.1 | Low risk | 0 | 2026-06-04 |
Block this in CI
pkgradar gate --ecosystem go github.com/securego/gas/[email protected]