Skip to content
OpenAdvisories

Package · Go

github.com/emiago/sipgo

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2026-77322

    SIPGO: DoS via unvalidated WebSocket frame length

    SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnection.Read in sip/transport_ws.go creates a wsutil.Reader without setting MaxFrameSize, allowing NextFrame to accept a client-controlled header.Length before ParseMaxMessag…

    emiago sipgo github.com/emiago/sipgo Go
  • High 7.5
    CVE-2026-58268

    SIPGO: DoS via unvalidated Content-Length in the stream parser

    SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.1, ParserStream.parseSingle in sip/parser_stream.go allocates a SIP body buffer from the client-controlled Content-Length header before ParseMaxMessageLength is enforced. An unauthen…

    emiago sipgo github.com/emiago/sipgo Go
  • High 8.7
    CVE-2025-68274

    SIPGO library has response DoS vulnerability via nil pointer dereference

    SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's `NewResponseFromRequest` function that affects all normal SIP opera…

    emiago sipgo github.com/emiago/sipgo Go