https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T14:47:30.221043+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-240260 EUVD-2026-240260 2026-10-19T14:47:30.223587+00:00 EUVD-2026-240260 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2529 fkie_cve-2022-2529 2026-10-19T14:47:30.223617+00:00

sflow decode package does not employ sufficient packet sanitisation which can lead to a denial of service attack. Attackers can craft malformed packets causing the process to consume large amounts of memory resulting in a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-9rpw-2h95-666c GHSA-9rpw-2h95-666c — Cloudflare GoFlow vulnerable to a Denial of Service in the sflow packet handling package 2026-10-19T14:47:30.223647+00:00

Affected: Go: github.com/cloudflare/goflow/v3

### Impact The sflow decode package prior to version 3.4.4 does not employ sufficient packet sanitisation which can lead to a denial of service attack. Attackers can craft malformed packets causing the process to consume huge amounts of memory resulting in a denial of service.

### Specific Go Packages Affected github.com/cloudflare/goflow/v3/decoders/sflow

### Patches Version 3.4.4 contains patches fixing this.

### Workarounds A possible workaround is to not have your goflow collector publicly reachable.

### For more information If you have any questions or comments about this advisory: * Open an issue in [goflow repo](https://github.com/cloudflare/goflow) * Email us [netdev[@]cloudflare.com ](mailto:netdev@cloudflare.com)

 https://cve.radiocsirt.org/vuln/gsd-2022-2529 gsd-2022-2529 2026-10-19T14:47:30.223677+00:00 gsd-2022-2529