PkgRadar

Go modules · proxy.golang.org

go.etcd.io/etcd/server/v3

Remote Payload: matched "cURL "

Why PkgRadar flagged v3.5.32-0.20260610150050-96cf0761082e

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · go.etcd.io/etcd/server/[email protected]/etcdmain/etcd.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v3.5.32-0.20260610150050-96cf0761082eReview122026-06-12
v3.8.0-alpha.0.0.20260609110845-d68ac12a73a6Low risk02026-06-10
v3.8.0-alpha.0.0.20260605092252-038d4c1085a1Low risk02026-06-06
v3.8.0-alpha.0Low risk02026-06-06
v3.7.0-rc.0Low risk02026-06-02
v3.5.31Review122026-06-02
v3.7.0-beta.0.0.20260530190623-7d274804c505Low risk02026-06-01

Block this in CI

PkgRadar gates go.etcd.io/etcd/server/v3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go go.etcd.io/etcd/server/[email protected]