Go
Skip to Main Content
  • Why Go submenu dropdown icon
    • Case Studies

      Common problems companies solve with Go

    • Use Cases

      Stories about how and why companies use Go

    • Security

      How Go can help keep you secure by default

  • Learn
  • Docs submenu dropdown icon
    • Effective Go

      Tips for writing clear, performant, and idiomatic Go code

    • Go User Manual

      A complete introduction to building software with Go

    • Standard library

      Reference documentation for Go's standard library

    • Release Notes

      Learn what's new in each Go release

    • API

      Reference documentation for the pkg.go.dev API

  • Packages
  • Community submenu dropdown icon
    • Recorded Talks

      Videos from prior events

    • Meetups

      Meet other local Go developers

    • Conferences

      Learn and network with Go developers from around the world

    • Go blog

      The Go project's official blog.

    • Go project

      Get help and stay informed from Go

    • Get connected

Go.
  • Why Go
    Why Go
    • Case Studies
    • Use Cases
    • Security
  • Learn
  • Docs
    Docs
    • Effective Go
    • Go User Manual
    • Standard library
    • Release Notes
    • API
  • Packages
  • Community
    Community
    • Recorded Talks
    • Meetups
    • Conferences
    • Go blog
    • Go project
    • Get connected
Alert  Affected by GO-2026-4588 and 3 other vulnerabilities
Alert  GO-2026-4588: `melange update-cache` has unbounded HTTP download that can exhaust disk in CI in chainguard.dev/melange
Alert  GO-2026-5279: melange has Path Traversal When Resolving External Pipelines via Unvalidated pipeline[].uses in chainguard.dev/melange
Alert  GO-2026-5562: melange has Path Traversal via .PKGINFO in --persist-lint-results in chainguard.dev/melange
Alert  GO-2026-5968: melange: Incomplete package integrity verification allows data section substitution in chainguard.dev/apko
  1. Discover Packages
  2. chainguard.dev/melange
  3. pkg
  4. container