HIGHGo
GHSA-7c47-xr7q-p6hg· CVE-2026-33062, GO-2026-4756free5GC NRF Discovery EncodeGroupId Function Panics on Malformed group-id-list Parameter
Modified: 3/23/2026
package
Go/github.com/free5gc/nrf
pkg:go/github.com/free5gc/nrf
HIGH7.5Go
GHSA-f8qv-7x5w-qr48· CVE-2026-44325, GO-2026-5349free5GC NRF: type-confusion panic in POST /oauth2/token structured-form parser via Reflect.Set on incompatible types
Modified: 6/25/2026
CRITICAL9.1Go
GHSA-q7c8-gfjh-8v4p· CVE-2025-66719, GO-2026-5570Free5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF value
Modified: 7/7/2026
—Go
GO-2026-4756· CVE-2026-33062, GHSA-7c47-xr7q-p6hgfree5GC NRF Discovery EncodeGroupId Function Panics on Malformed group-id-list Parameter in github.com/free5gc/nrf
Modified: 3/23/2026
—Go
GO-2026-5349· CVE-2026-44325, GHSA-f8qv-7x5w-qr48free5GC NRF: type-confusion panic in POST /oauth2/token structured-form parser via Reflect.Set on incompatible types in github.com/free5gc/nrf
Modified: 6/25/2026
—Go
GO-2026-5570· CVE-2025-66719, GHSA-q7c8-gfjh-8v4pFree5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF value in github.com/free5gc/nrf
Modified: 7/7/2026