gopacket vulnerabilities

CVEs whose affected-version data names the gopacket package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119299Medium· 5.9PoC

1w ago

gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments

gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes attacker-controlled declared lengths and counts to decodeSCTPInit, decodeSCTPShutdown, decodeSCTPError, decodeSCTPSack…

▾ Twilightgopacket · gopacketEPSS 0.47%via CVEORG