{"id":"GO-2026-5198","revision":"404a44d23caf4a03abf69e435e7f6cd2","records":[{"revision":"404a44d23caf4a03abf69e435e7f6cd2","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5198","aliases":["CVE-2026-41642","GHSA-7235-89m6-f4px"],"title":"GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute in github.com/osrg/gobgp","description":"GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute in github.com/osrg/gobgp","state":0,"publishedAt":"2026-07-24T18:35:55+00:00","modifiedAt":"2026-07-24T19:00:21.5529678+00:00","affected":[{"ecosystem":"Go","name":"github.com/osrg/gobgp/v4","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"4.3.0"},{"kind":"fixed","version":"4.4.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/osrg/gobgp/security/advisories/GHSA-7235-89m6-f4px","https://github.com/osrg/gobgp/releases/tag/v4.4.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5198","license":"OSV · upstream source license applies","key":"osv:GO-2026-5198","identifiers":["GO-2026-5198","CVE-2026-41642","GHSA-7235-89m6-f4px"]},"retained":false,"historicalAffected":[]}],"coverage":[]}