~ / search / GHSA-jrqj-6vq2-7r63

GHSA-jrqj-6vq2-7r63

onos-lib-go allows an index out-of-range panic

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-30077

Packages

EcosystemPackageAffectedFixed in
Go github.com/onosproject/onos-lib-go <= 0.10.28 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits.

References

External links from the advisory. They lead to third-party sites.