PatchTheCVEgobgp vulnerabilities and fixes
Recent CVEs affecting gobgp, with upgrade or downgrade steps. 7 tracked.
gobgp has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-05-07. Highest priority: CVE-2026-41643 (score 48/100).
- CVE-2026-41642 HIGH 7.5 DOWNGRADE GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language
- CVE-2026-42285 HIGH 7.5 DOWNGRADE GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language
- CVE-2026-41643 HIGH 7.5 UPGRADE GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language
- CVE-2026-7736 HIGH 7.3 UPGRADE A vulnerability was determined in osrg GoBGP up to 4.3.0
- CVE-2026-7735 HIGH 7.3 UPGRADE A vulnerability was found in osrg GoBGP up to 4.3.0
- CVE-2026-7737 MEDIUM 5.3 UPGRADE A vulnerability was identified in osrg GoBGP up to 4.3.0
- CVE-2026-7734 MEDIUM 5.3 UPGRADE A vulnerability has been found in osrg GoBGP up to 4.3.0
FAQ
How do I fix gobgp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gobgp being exploited right now?
None of the tracked gobgp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gobgp CVE should I patch first?
CVE-2026-41643 currently ranks highest (48/100): GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language.