Go/github.com/cloudflare/goflow/v3 CVE-2022-2529: high 7.5, EPSS 0.97%

Cloudflare GoFlow vulnerable to a Denial of Service in the sflow packet handling package

Action: Upgrade github.com/cloudflare/goflow/v3 to 3.4.4 or later.

go get github.com/cloudflare/goflow/v3@v3.4.4

Affected

Fixed versions

Sources

• osv: GHSA-9rpw-2h95-666c
• https://github.com/cloudflare/goflow/security/advisories/GHSA-9rpw-2h95-666c
• https://nvd.nist.gov/vuln/detail/CVE-2022-2529
• https://github.com/cloudflare/goflow/commit/2b94619a6204443e3ca1769f4e459f9f57039c51
• https://github.com/cloudflare/goflow/commit/c829ccd2c0aafdc9b886b20bf6f28095607f4998
• https://github.com/cloudflare/goflow
• https://github.com/cloudflare/goflow/releases/tag/v3.4.4

CVE-2022-2529 · published 2022-10-01T15:52:23Z · modified 2026-07-08T06:30:05.372377259Z · JSON