Executive brief
GoBGP vulnerable to a denial of service via the NEXT_HOP path attribute in github.com/osrg/gobgp
Affected products
- Go github.com/osrg/gobgp/v3
- Go github.com/osrg/gobgp
- Go github.com/osrg/gobgp/v4
Junglewise Threat Intelligence
CVE-2026-30405: GO-2026-4736 - GoBGP vulnerable to a denial of service via the NEXT_HOP path attribute in github.com/osrg/gobgp
CVE-2026-30405 · Severity: low · CVSS 3.1 · Published 2026-04-07
Technologies: github.com/osrg/gobgp/v3 (Go), github.com/osrg/gobgp (Go), github.com/osrg/gobgp/v4 (Go). Vendors: Go.
Related threats
- GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a
- GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP O
- GO-2026-5266 - GoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE in github.com/osrg/gobgp
- GO-2026-5198 - GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute in github.com/osrg/gobgp
- GO-2026-5427 - GoBGP has an Integer Underflow Issue in github.com/osrg/gobgp