Security
فارسی
All products

github.com/osrg/gobgp/v4

Go · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
GoBGP vulnerable to a denial of service via the NEXT_HOP path attributeCVE-2026-30405 · GHSA-4P9M-8GC4-RW2HVersion ranges need review. github.com/osrg/gobgp/v3github.com/osrg/gobgp/v4 Go High Fix reported
GoBGP confederation validation panics on empty AS_PATH attributeCVE-2026-49838 · GHSA-FRRJ-87JH-2772Version ranges need review. github.com/osrg/gobgp/v4Red Hat OpenShift Container Platform 4/openshift4/metallb-rhel8 GoRed Hat Medium Fix reported
GoBGP has Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATECVE-2026-41643 · GHSA-8RXH-R2P6-7F2QVersion ranges need review. github.com/osrg/gobgp/v4 Go High Fix reported
GoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes functionCVE-2026-37462 · GHSA-PW7P-7FQV-HPJ8Version ranges need review. github.com/osrg/gobgp/v4 Go High Fix reported
GoBGP has Remote Denial of Service (Panic) via Malformed Well-known Path AttributeCVE-2026-41642 · GHSA-7235-89M6-F4PXVersion ranges need review. github.com/osrg/gobgp/v4 Go High Fix reported
GoBGP has a panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference)CVE-2026-42285 · GHSA-P3W2-64XM-833JVersion ranges need review. github.com/osrg/gobgp/v4 Go High Fix reported
GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundariesCVE-2026-49837 · GHSA-GJRG-JJR3-56CMVersion ranges need review. github.com/osrg/gobgp/v4 Go Medium Fix reported
GoBGP has an Integer Underflow IssueCVE-2026-7736 · GHSA-HJ4W-QR9J-C4CFVersion ranges need review. github.com/osrg/gobgp/v4 Go Medium Fix reported
GoBGP has an out-of-bounds read in the ParseIP6Extended functionCVE-2026-37461 · GHSA-WMVJ-F67G-QG4GVersion ranges need review. github.com/osrg/gobgp/v4 Go High Fix reported
GoBGP has an Improper Resource Shutdown or ReleaseCVE-2026-7734 · GHSA-VM3G-8XWV-MXFPVersion ranges need review. github.com/osrg/gobgp/v4 Go Medium Fix reported
GoBGP has Improper Restriction of Operations within the Bounds of a Memory BufferCVE-2026-7737 · GHSA-W88C-9VG8-CMQ8 github.com/osrg/gobgp/v4github.com/osrg/gobgp Go Medium Fix reported