Bird Lg Go

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:xddxdd:bird-lg-go:*:*:*:*:*:go:*:*

part: a version: * update: *

VendorXddxdd (d08c1db2-a561-5a35-baa8-9e5095c392dd)
ProductBird Lg Go (7e3bef0a-b18e-56fe-97e2-29cbc5344566)
Edition*
Language*
Software edition*
Target softwarego
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/xddxdd/bird-lg-go purl2cpe 2026-06-01 10:17:27.233879
pkg:golang/github.com/xddxdd/bird-lg-go purl2cpe 2026-06-01 10:17:27.233881

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-26514 vulnerable 2026-06-08 07:53:21.648405 Details available
An Argument Injection vulnerability exists in bird-lg-go before commit 6187a4e. The traceroute module uses shlex.Split to parse user input without validation, allowing remote attackers to inject arbitrary flags (e.g., -w, -q) via the q parameter. This can be exploited to cause a Denial of Service (DoS) by exhausting system resources.
Published: 2026-03-04T00:00:00.000Z
Updated: 2026-03-04T15:39:12.164Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.