GO
Product
gobgp
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 12Medium 3Low 4
Watch
Add gobgp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-43973 | 9.8 | Apr 21 | An issue was discovered in GoBGP before 3.35.0 Affected: before 3.35.0 |
| CVE-2026-41643 | 7.5 | May 7 | GoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE Affected: < 4.3.0 |
| CVE-2026-42285 | 7.5 | May 7 | GoBGP: Panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference) Affected: = 4.4.0 |
| CVE-2026-41642 | 7.5 | May 7 | GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute Affected: = 4.3.0 |
| CVE-2026-7737 | 7.5 | May 4 | osrg GoBGP BMP Parser bmp.go BMPStatisticsReport.ParseBody out-of-bounds Affected: 4.0; 4.1; 4.2; 4.3.0 |
| CVE-2026-7736 | 7.5 | May 4 | osrg GoBGP mrt.go parseRibEntry integer underflow Affected: 4.0; 4.1; 4.2; 4.3.0 |
| CVE-2026-7734 | 7.5 | May 4 | osrg GoBGP SRv6 L3 Service prefix_sid.go SRv6L3ServiceAttribute.DecodeFromBytes denial of service Affected: 4.0; 4.1; 4.2; 4.3.0 |
| CVE-2026-37461 | 7.5 | May 4 | An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message Affected: 4.3.0 |
| CVE-2026-30405 | 7.5 | Mar 16 | An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute Affected: 4.2.0 |
| CVE-2025-43972 | 7.5 | Apr 21 | An issue was discovered in GoBGP before 3.35.0 Affected: before 3.35.0 |
| CVE-2025-43971 | 7.5 | Apr 21 | An issue was discovered in GoBGP before 3.35.0 Affected: before 3.35.0 |
| CVE-2023-46565 | 7.5 | Apr 29 | Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of service via the handlingError function in… Affected: 419c50dfac578daa4d11256904d0dc182f1a9b22 |
| CVE-2026-7735 | 7.3 | May 4 | osrg GoBGP AIGP Attribute bgp.go PathAttributeAigp.DecodeFromBytes buffer overflow Affected: 4.0; 4.1; 4.2; 4.3.0 |
| CVE-2026-49838 | 5.9 | Sep 10 | GoBGP confederation validation panics on empty AS_PATH attribute Affected: < 4.7.0 |
| CVE-2026-49837 | 5.9 | Sep 10 | GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries Affected: < 4.6.0 |
| CVE-2025-43970 | 5.3 | Apr 21 | An issue was discovered in GoBGP before 3.35.0 Affected: before 3.35.0 |
| CVE-2026-5124 | 3.7 | Mar 30 | osrg GoBGP BGP Header bgp.go BGPHeader.DecodeFromBytes access control Affected: 4.0; 4.1; 4.2; 4.3.0 |
| CVE-2026-5123 | 3.7 | Mar 30 | osrg GoBGP bgp.go DecodeFromBytes off-by-one Affected: 4.0; 4.1; 4.2; 4.3.0 |
| CVE-2026-5122 | 3.7 | Mar 30 | osrg GoBGP BGP OPEN Message bgp.go DecodeFromBytes access control Affected: 4.0; 4.1; 4.2; 4.3.0 |
| CVE-2025-7464 | 3.7 | Jul 12 | osrg GoBGP rtr.go SplitRTR out-of-bounds Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +32 more |
Showing 20