VDB
KO

GO-2026-5525

GoBGP has a panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference) in github.com/osrg/gobgp

Quick fix

GO-2026-5525 — github.com/osrg/gobgp/v4: upgrade to the fixed version with the command below.

go get github.com/osrg/gobgp/v4@v4.5.0

Details

GoBGP has a panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference) in github.com/osrg/gobgp

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/osrg/gobgp/v4
Introduced in: 4.4.0 Fixed in: 4.5.0
Fix go get github.com/osrg/gobgp/v4@v4.5.0

References