GoBGP vulnerabilities
We track 2 vulnerabilities in GoBGP products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 21, 2025.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest GoBGP vulnerabilities
- 9.8 Critical severity
GoBGP: Off-by-one Error
An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message.
- 7.5 High severity
GoBGP: Improper Validation of Specified Quantity in Input
An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a certain context.