Go security posture
Review linked rules in the directory and use Composer to export guardrails for your IDE. Detailed posture metrics will appear here as the catalog grows.
2 linked rules in the directory.
Top risks for this stack
05 critical02 high
Echo: Encoded slash (%2F) bypasses route-level protection and exposes static filesHIGH
Aug 2026
No rule coverage yet — consider contributing a rule.
GoFiber Vulnerable to X-Real-IP Spoofing via Header.Add() in BalancerForwardMEDIUM
Jul 2026
No rule coverage yet — consider contributing a rule.
golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcementCRITICAL
Jun 2026
No rule coverage yet — consider contributing a rule.
golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked statusCRITICAL
Jun 2026
No rule coverage yet — consider contributing a rule.
golang.org/x/crypto vulnerable to infinite loop on large channel writesCRITICAL
Jun 2026
No rule coverage yet — consider contributing a rule.
golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassedCRITICAL
Jun 2026
No rule coverage yet — consider contributing a rule.
golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoSHIGH
Jun 2026
No rule coverage yet — consider contributing a rule.
golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responsesCRITICAL
Jun 2026
No rule coverage yet — consider contributing a rule.