← All advisories

High severity7.5NVD Advisory· Published Mar 16, 2026· Updated Jun 17, 2026

CVE-2026-30405

CVE-2026-30405

Description

An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/osrg/gobgp/v4Go	<= 4.3.0	—

Affected products

6

Osrg/Gobgp
cpe:2.3:a:osrg:gobgp:4.2.0:*:*:*:*:*:*:*
osv-coords5 versions
pkg:apk/chainguard/kube-vip pkg:apk/chainguard/kube-vip-fips pkg:apk/wolfi/kube-vip pkg:golang/github.com/osrg/gobgp/v4 pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0
< 1.2.1-r0+ 4 more
- (no CPE)range: < 1.2.1-r0
- (no CPE)range: < 1.2.1-r0
- (no CPE)range: < 1.2.1-r0
- (no CPE)range: <= 4.3.0
- (no CPE)range: < 0.0.20260723T184607-160000.1.1

Patches

Vulnerability mechanics

References

4

github.com/osrg/gobgp/issues/3305nvdExploitIssue TrackingVendor AdvisoryWEB
github.com/advisories/GHSA-4p9m-8gc4-rw2hghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2026-30405ghsaADVISORY
github.com/osrg/gobgp/commit/583080a7258e22cc884162e15b078771aa2c2c80ghsaWEB

News mentions

0

No linked articles in our index yet.