| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/osrg/gobgp | all versions | |
| github.com/osrg/gobgp/v3 | < 3.35.0 | 3.35.0 |
| gobgp | < 3.35.0 | 3.35.0 |
An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a certain context.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free