This repository contains the infrastructure and internal reports to create the Go Vulnerability Database.
Warning: Packages here are internal to the Go Security Team and its needs; Some may be modified arbitrarily or even disappear altogether. In short, code in this repository is NOT subject to the Go 1 Compatibility Promise.
Check out https://go.dev/security/vuln for more information about the Go vulnerability management system.
Click here to report a public vulnerability in the Go ecosystem, or give feedback about the project.
The privacy policy for govulncheck can be found at https://vuln.go.dev/privacy.
Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.
Database entries are distributed under the terms of the CC-BY-4.0 license. See go.dev/security/vuln/database for information on how to access these entries.