Browse CVEs

HIGH 7.5 CVE-2026-42285 GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.4.0, an unauthenticated remote BGP … Gobgp No fix yet Fix from $1,9502026-05-07 HIGH 7.5 CVE-2026-41642 GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.3.0, a remote Denial of Service (Do… Gobgp Patch available Fix from $1,9502026-05-07 HIGH 7.5 CVE-2026-41643 GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.3.0, a remote Denial of Servi… Gobgp 4.3.0+ Fix from $1,9502026-05-07 HIGH 7.5 CVE-2026-37461 An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplyin… Gobgp Patch available Fix from $1,9502026-05-04 HIGH 7.5 CVE-2026-7736 A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function parseRibEntry of the file pkg/packet/mrt/mrt… Gobgp 4.4.0+ Fix from $1,9502026-05-04 HIGH 7.5 CVE-2026-7737 A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.… Gobgp 4.4.0+ Fix from $1,9502026-05-04 HIGH 7.5 CVE-2026-7734 A vulnerability has been found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3ServiceAttribute.DecodeFromBytes of the file pkg/packet/bgp… Gobgp 4.4.0+ Fix from $1,9502026-05-04 HIGH 7.3 CVE-2026-7735 A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of … Gobgp 4.4.0+ Fix from $1,9502026-05-04 HIGH 7.5 CVE-2026-30405 An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute Gobgp No fix yet Fix from $1,9502026-03-16 CRITICAL 9.8 CVE-2025-43973 An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all b… Gobgp 3.35.0+ Fix from $2,3002025-04-21 HIGH 7.5 CVE-2025-43971 An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen. Gobgp 3.35.0+ Fix from $1,9502025-04-21 HIGH 7.5 CVE-2025-43972 An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 b… Gobgp 3.35.0+ Fix from $1,9502025-04-21 MEDIUM 5.3 CVE-2025-43970 An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 b… Gobgp 3.35.0+ Fix from $1,6002025-04-21