GHSA-PW7P-7FQV-HPJ8 GoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function

An integer underflow in the BGPUpdate.DecodeFromBytes function /bgp/bgp.go of gobgp v4.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted BGP UPDATE message...

CVE-2026-37461

The gobgp border gateway protocol implementation (v4.3.0) contains an out-of-bounds read vulnerability within the ParseIP6Extended function located in /bgp/bgp.go. An attacker can exploit this issue by supplying a crafted BGP UPDATE message , which may lead to a Denial of Service (DoS) by causing...