VYPR

gopacket

by Debian

CVEs (2)

  • CVE-2026-54345Jul 29, 2026
    risk 0.00cvss epss

    gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes an AVP data length by subtracting a fixed header size from an attacker-controlled AVP Length field, so a vendor-flagged AVP whose Length is smaller than the…

  • CVE-2026-54332Jul 29, 2026
    risk 0.00cvss epss

    gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the sFlow ExtendedGatewayFlow decoder in layers/sflow.go reads an attacker-controlled 32-bit community count and AS path member count and sizes a slice allocation from those counts without…