—

GO-2026-4994

free5GC's BSF concurrent PUT /nbsf-management/v1/subscriptions/{subId} crashes the BSF process via concurrent map read/write on Subscriptions in github.com/free5gc/bsf

Details

free5GC's BSF concurrent PUT /nbsf-management/v1/subscriptions/{subId} crashes the BSF process via concurrent map read/write on Subscriptions in github.com/free5gc/bsf

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/free5gc/bsf

Introduced in: 0 Fixed in: 1.0.2

Fix go get github.com/free5gc/bsf@v1.0.2

References

https://github.com/free5gc/free5gc/security/advisories/GHSA-27ph-8q4f-h7m7 [ADVISORY]
https://github.com/free5gc/bsf/commit/277908565fd628d974a13ef562b81a8b7b519ffa [FIX]
https://github.com/free5gc/bsf/pull/7 [FIX]
https://github.com/free5gc/free5gc/issues/926 [WEB]