MEDIUM6.8Go
GHSA-c5jg-wr5v-2wp2· CVE-2025-43973, GO-2025-3633GoBGP does not verify that the input length
Modified: 9/10/2026
package
Go/github.com/osrg/gobgp
pkg:go/github.com/osrg/gobgp
MEDIUM4.3Go
GHSA-hqhq-hp5x-xp3w· CVE-2025-43970, GO-2025-3630GoBGP does not properly check the input length
Modified: 9/10/2026
MEDIUM6.8Go
GHSA-mfvv-mgf6-q25r· CVE-2025-43972, GO-2025-3632GoBGP crashes in the flowspec parser
Modified: 9/10/2026
MEDIUM5.3Go
GHSA-w88c-9vg8-cmq8· CVE-2026-7737, GO-2026-5699GoBGP has Improper Restriction of Operations within the Bounds of a Memory Buffer
Modified: 7/7/2026
—Go
GO-2025-3630· CVE-2025-43970, GHSA-hqhq-hp5x-xp3wGoBGP does not properly check the input length in github.com/osrg/gobgp
Modified: 2/4/2026
—Go
GO-2025-3631· CVE-2025-43971, GHSA-7m35-vw2c-696vGoBGP panics due to a zero value for softwareVersionLen in github.com/osrg/gobgp
Modified: 2/4/2026
—Go
GO-2025-3632· CVE-2025-43972, GHSA-mfvv-mgf6-q25rGoBGP crashes in the flowspec parser in github.com/osrg/gobgp
Modified: 2/4/2026
—Go
GO-2025-3633· CVE-2025-43973, GHSA-c5jg-wr5v-2wp2GoBGP does not verify that the input length in github.com/osrg/gobgp
Modified: 2/4/2026
—Go
GO-2026-4736· CVE-2026-30405, GHSA-4p9m-8gc4-rw2hGoBGP vulnerable to a denial of service via the NEXT_HOP path attribute in github.com/osrg/gobgp
Modified: 6/26/2026