GHSA-PW7P-7FQV-HPJ8 GoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function

An integer underflow in the BGPUpdate.DecodeFromBytes function /bgp/bgp.go of gobgp v4.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted BGP UPDATE message...

CVE-2026-37461

The GoBGP border gateway protocol implementation (v4.3.0) is vulnerable to an out-of-bounds read in the ParseIP6Extended function located in the /bgp/bgp.go file. A remote attacker can exploit this by supplying a crafted BGP UPDATE message to cause a Denial of Service (DoS) , leading to a service...