GoBGP vulnerabilities

2 known vulnerabilities in GoBGP from GoBGP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  GoBGP: Off-by-one Error

  CVE-2025-43973Apr 21, 2025GoBGP

  An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message.

• 7.5 High severity

  GoBGP: Improper Validation of Specified Quantity in Input

  CVE-2025-43972Apr 21, 2025GoBGP

  An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a certain context.