Loading the latest scan…
Go modules · proxy.golang.org
Shipped Live Secret, Tls Verification Disabled, Remote Payload +2 more
Why PkgRadar flagged v2.28.1-0.20260720074807-45b083a0cb42
| Severity | Signal | Evidence |
|---|---|---|
| high | Shipped Live Secret | — |
| medium | Tls Verification Disabled | — |
| medium | Remote Payload | — |
| medium | Remote Payload | — |
| medium | Tls Verification Disabled | — |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v2.28.1-0.20260720074807-45b083a0cb42 | High risk | 98 | 2026-07-25 |
v2.27.2-0.20260603154852-9addc97cefc9 | Low risk | 0 | 2026-06-08 |
v2.27.1 | Low risk | 0 | 2026-06-08 |
v2.27.0 | Low risk | 0 | 2026-06-08 |
Block this in CI
pkgradar gate --ecosystem go github.com/securego/goSec/[email protected]