GitHub Advisoryadvisory · Go
GHSA-jrqj-6vq2-7r63 onos-lib-go allows an index out-of-range panic
MEDIUM
Official page ↗
- Aliases
- CVE-2025-30077
- Ecosystem
- Go
- Packages
- github.com/onosproject/onos-lib-go
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-129
- Reviewed
- 2025-03-17
Affected packages
• Go github.com/onosproject/onos-lib-go: <= 0.10.28 (no fix yet)
Description
Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits.
Related
Alias · CVE (1)
- CVE-2025-30077 Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of… vulnerability
Weakness · CWE (1)
- CWE-129 Improper Validation of Array Index weakness