pkg:Go/github.com/osrg/gobgp/v4

All known vulnerabilities

• HIGH7.5CVE-2026-42285GoBGP has a panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference)
  >= 4.4.0, < 4.5.0
• HIGH7.5CVE-2026-37461GoBGP has an out-of-bounds read in the ParseIP6Extended function
  from 0, < 4.4.0
• HIGH7.5CVE-2026-41643GoBGP has Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE
  from 0, < 4.3.0
• HIGH7.5GoBGP has Remote Denial of Service (Panic) via Malformed Well-known Path Attribute
  >= 4.3.0, < 4.4.0
• HIGH7.5GoBGP vulnerable to a denial of service via the NEXT_HOP path attribute in github.com/osrg/gobgp
  from 0, <= 4.3.0
• HIGH7.5GoBGP vulnerable to a denial of service via the NEXT_HOP path attribute in github.com/osrg/gobgp
  from 0
• HIGH7.3GoBGP has an Integer Underflow Issue
  from 0, < 4.4.0
• MEDIUM5.3GoBGP has an Improper Resource Shutdown or Release
  from 0, < 4.4.0