MEDIUM4.3Go
GHSA-4rqf-grm6-vf75· CVE-2026-44323, GO-2026-5131free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing subsId when UE state exists (nil pointer dereference)
Modified: 6/25/2026
package
Go/github.com/free5gc/udr
pkg:go/github.com/free5gc/udr
MEDIUMGo
GHSA-6gxq-gpr8-xgjp· CVE-2026-47780, GO-2026-5178free5GC UDR has improper `ueId` validation in EE subscription handlers that allows arbitrary identifier persistence
Modified: 6/25/2026
HIGH7.5Go
GHSA-g9cw-qwhf-24jp· CVE-2026-40246, GO-2026-5396free5gc UDR improper path validation allows unauthenticated deletion of Traffic Influence Subscriptions
Modified: 7/21/2026
MEDIUM5.3Go
GHSA-gx38-8h33-pmxr· CVE-2026-40249, GO-2026-5407free5gc UDR fail-open request handling in PolicyDataSubsToNotifySubsIdPut may allow unintended subscription updates after input errors
Modified: 6/25/2026
HIGH7.5Go
GHSA-jgq2-qv8v-5cmj· CVE-2026-40248, GO-2026-5470free5gc UDR improper path validation allows unauthenticated creation and modification of Traffic Influence Subscriptions
Modified: 6/25/2026
MEDIUM6.5Go
GHSA-jqfc-gwj5-3w63· CVE-2026-44324, GO-2026-5478free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)
Modified: 6/25/2026
MEDIUM5.8Go
GHSA-jwch-w7wh-gqjm· CVE-2026-40343, GO-2026-5482free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation
Modified: 6/25/2026
HIGH7.5Go
GHSA-wrwh-rpq4-87hf· CVE-2026-40245, GO-2026-5722free5gc UDR nudr-dr influenceData/subs-to-notify leaks SUPI in error response body without authentication
Modified: 6/25/2026
HIGH7.5Go
GHSA-x5r2-r74c-3w28· CVE-2026-40247, GO-2026-5741free5gc UDR improper path validation allows unauthenticated access to Traffic Influence Subscriptions
Modified: 6/25/2026
—Go
GO-2026-5131· CVE-2026-44323, GHSA-4rqf-grm6-vf75free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing subsId when UE state exists (nil pointer dereference) in github.com/free5gc/udr
Modified: 6/25/2026
—Go
GO-2026-5178· CVE-2026-47780, GHSA-6gxq-gpr8-xgjpfree5GC UDR has improper `ueId` validation in EE subscription handlers that allows arbitrary identifier persistence in github.com/free5gc/udr
Modified: 6/25/2026
—Go
GO-2026-5396· CVE-2026-40246, GHSA-g9cw-qwhf-24jpfree5gc UDR improper path validation allows unauthenticated deletion of Traffic Influence Subscriptions in github.com/free5gc/udr
Modified: 6/25/2026
—Go
GO-2026-5407· CVE-2026-40249, GHSA-gx38-8h33-pmxrfree5gc UDR fail-open request handling in PolicyDataSubsToNotifySubsIdPut may allow unintended subscription updates after input errors in github.com/free5gc/udr
Modified: 6/25/2026
—Go
GO-2026-5470· CVE-2026-40248, GHSA-jgq2-qv8v-5cmjfree5gc UDR improper path validation allows unauthenticated creation and modification of Traffic Influence Subscriptions in github.com/free5gc/udr
Modified: 6/25/2026
—Go
GO-2026-5478· CVE-2026-44324, GHSA-jqfc-gwj5-3w63free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request) in github.com/free5gc/udr
Modified: 6/25/2026
—Go
GO-2026-5482· CVE-2026-40343, GHSA-jwch-w7wh-gqjmfree5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation in github.com/free5gc/udr
Modified: 6/25/2026
—Go
GO-2026-5722· CVE-2026-40245, GHSA-wrwh-rpq4-87hffree5gc UDR nudr-dr influenceData/subs-to-notify leaks SUPI in error response body without authentication in github.com/free5gc/udr
Modified: 6/25/2026
—Go
GO-2026-5741· CVE-2026-40247, GHSA-x5r2-r74c-3w28free5gc UDR improper path validation allows unauthenticated access to Traffic Influence Subscriptions in github.com/free5gc/udr
Modified: 6/25/2026