PatchTheCVEosrg vulnerabilities
Recent CVEs affecting osrg products. 7 tracked.
osrg has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-05-07. Highest priority: CVE-2026-41643 (score 48/100).
- CVE-2026-41642 HIGH 7.5 DOWNGRADE GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language
- CVE-2026-42285 HIGH 7.5 DOWNGRADE GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language
- CVE-2026-41643 HIGH 7.5 UPGRADE GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language
- CVE-2026-7736 HIGH 7.3 UPGRADE A vulnerability was determined in osrg GoBGP up to 4.3.0
- CVE-2026-7735 HIGH 7.3 UPGRADE A vulnerability was found in osrg GoBGP up to 4.3.0
- CVE-2026-7737 MEDIUM 5.3 UPGRADE A vulnerability was identified in osrg GoBGP up to 4.3.0
- CVE-2026-7734 MEDIUM 5.3 UPGRADE A vulnerability has been found in osrg GoBGP up to 4.3.0
FAQ
How do I fix osrg vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is osrg being exploited right now?
None of the tracked osrg CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which osrg CVE should I patch first?
CVE-2026-41643 currently ranks highest (48/100): GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language.