ETK-2026-3587Zero's internal tracking ID, independent of the CVE number.

{
  "etk_id": "ETK-2026-3587",
  "cve_id": null,
  "display_id": "ETK-2026-3587",
  "ghsa_id": "GHSA-27q8-99gx-2jhw",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "IP fragment reassembly flaws in gopacket",
  "summary": "Programs using gopacket to reassemble IPv4 or IPv6 traffic from untrusted sources are affected. An attacker can send crafted fragmented traffic that causes an IDS or flow monitor to misreport, omit, or misclassify traffic, or use excessive CPU and memory; exploitation requires the application to process fragmented IP traffic.",
  "mitigation": "Upgrade github.com/gopacket/gopacket to version 1.7.6 or later. Until upgraded, reduce exposure by preventing untrusted fragmented IP traffic from reaching applications that use its defragmenters.",
  "vendor": "go",
  "product": "go:github.com/gopacket/gopacket",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 1.7.5"
      ],
      "ecosystem": "go",
      "fixed_versions": [
        "1.7.6"
      ],
      "package_name": "github.com/gopacket/gopacket",
      "purl": "pkg:golang/github.com/gopacket/gopacket"
    }
  ],
  "cwes": [
    190
  ],
  "cvss_score": 7.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 6.1629496,
  "t0_at": null,
  "signals": {
    "trigger_signal": {
      "at": "2026-11-05T02:16:02+00:00",
      "days": -0.6080390205208334,
      "is_lower_bound": true,
      "measured_at": "2026-11-05T16:51:36.689743+00:00",
      "url": "https://github.com/gopacket/gopacket/security/advisories/GHSA-27q8-99gx-2jhw"
    }
  }
}