MEDIUMGo
GHSA-6r28-9ppf-4hj5· CVE-2026-54345, GO-2026-6121GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)
Modified: 9/10/2026
package
Go/github.com/gopacket/gopacket
pkg:go/github.com/gopacket/gopacket
MEDIUMGo
GHSA-g6v3-7xmc-w563· CVE-2026-54332, GO-2026-6122GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS
Modified: 9/10/2026
—Go
GO-2026-6121· CVE-2026-54345, GHSA-6r28-9ppf-4hj5GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS) in github.com/gopacket/gopacket
Modified: 8/18/2026
—Go
GO-2026-6122· CVE-2026-54332, GHSA-g6v3-7xmc-w563GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS in github.com/gopacket/gopacket
Modified: 8/18/2026