~ / search / GHSA-4p9m-8gc4-rw2h

GHSA-4p9m-8gc4-rw2h

GoBGP vulnerable to a denial of service via the NEXT_HOP path attribute

Source: GitHub Advisory Database (reviewed) High CVE-2026-30405

Packages

EcosystemPackageAffectedFixed in
Go github.com/osrg/gobgp/v4 < 4.4.0 4.4.0

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute.

References

External links from the advisory. They lead to third-party sites.