Priority HIGH 72
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00542 · Published 2026-05-07 · Fixed in 4.3.0 CWE-129
Priority HIGH 72
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00418 · Published 2026-05-07 · Fixed in 4.5.0 CWE-476
Priority HIGH 72
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00503 · Published 2026-05-07 · Fixed in 4.4.0 CWE-476
Priority LOW 37
A vulnerability was identified in osrg GoBGP up to 4.3.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00631 · Published 2026-05-04 · Fixed in 4.4.0 CWE-119
Priority LOW 37
A vulnerability was determined in osrg GoBGP up to 4.3.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00454 · Published 2026-05-04 · Fixed in 4.4.0 CWE-189
Priority LOW 36
A vulnerability was found in osrg GoBGP up to 4.3.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00361 · Published 2026-05-04 · Fixed in 4.4.0 CWE-119
Priority LOW 37
A vulnerability has been found in osrg GoBGP up to 4.3.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00464 · Published 2026-05-04 · Fixed in 4.4.0 CWE-404
Priority LOW 39
An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00335 · Published 2026-05-04 · Fixed in 4.4.0 CWE-125
Priority LOW 28
A security vulnerability has been detected in osrg GoBGP up to 4.3.0.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00298 · Published 2026-03-30 · No fix listed CWE-266
Priority LOW 28
A weakness has been identified in osrg GoBGP up to 4.3.0.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00425 · Published 2026-03-30 · No fix listed CWE-189
Priority LOW 28
A security flaw has been discovered in osrg GoBGP up to 4.3.0.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00298 · Published 2026-03-30 · No fix listed CWE-266
Priority HIGH 72
An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00354 · Published 2026-03-16 · Fixed in 4.4.0 CWE-400
Priority MEDIUM 43
An issue was discovered in GoBGP before 3.35.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00573 · Published 2025-04-21 · Fixed in 3.35.0 CWE-193
Priority LOW 34
An issue was discovered in GoBGP before 3.35.0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00559 · Published 2025-04-21 · Fixed in 3.35.0 CWE-1284
Priority MEDIUM 44
An issue was discovered in GoBGP before 3.35.0.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00554 · Published 2025-04-21 · Fixed in 3.35.0 CWE-193
Priority LOW 24
An issue was discovered in GoBGP before 3.35.0.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0043 · Published 2025-04-21 · Fixed in 3.35.0 CWE-1284
THREATIST.IORead the docs