What is GHSA-jrqj-6vq2-7r63?

GHSA-jrqj-6vq2-7r63 is a security advisory published by GitHub Security Advisories with Medium severity. onos-lib-go allows an index out-of-range panic

Which CVE IDs does GHSA-jrqj-6vq2-7r63 cover?

GHSA-jrqj-6vq2-7r63 covers the following CVE IDs: CVE-2025-30077. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jrqj-6vq2-7r63?

GHSA-jrqj-6vq2-7r63 has a CVSS v3 base score of 6.2, published by GitHub Security Advisories.

Which products are affected by GHSA-jrqj-6vq2-7r63?

GHSA-jrqj-6vq2-7r63 affects 1 product, including: go/github.com/onosproject/onos-lib-go:\u003c= 0.10.28.

GHSA-jrqj-6vq2-7r63MediumCVSS 6.2

onos-lib-go allows an index out-of-range panic

Vendor

GitHub Security Advisories

Published

March 16, 2025

Last Modified

March 17, 2025

🔗 CVE IDs covered (1)

CVE-2025-30077 →

📋 Description

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits.

🎯 Affected products1

go/github.com/onosproject/onos-lib-go:<= 0.10.28

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-30077
https://github.com/onosproject/onos-lib-go/issues/295
https://github.com/onosproject/onos-lib-go/commit/55579ffad35f59a5945c7861d944cd57a3b4b3d0
https://github.com/advisories/GHSA-jrqj-6vq2-7r63