—

GO-2026-4994

free5GC's BSF concurrent PUT /nbsf-management/v1/subscriptions/{subId} crashes the BSF process via concurrent map read/write on Subscriptions in github.com/free5gc/bsf

Quick fix

GO-2026-4994 — github.com/free5gc/bsf: upgrade to the fixed version with the command below.

go get github.com/free5gc/bsf@v1.0.2

Details

free5GC's BSF concurrent PUT /nbsf-management/v1/subscriptions/{subId} crashes the BSF process via concurrent map read/write on Subscriptions in github.com/free5gc/bsf

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/free5gc/bsf

Introduced in: 0Fixed in: 1.0.2

Fixgo get github.com/free5gc/bsf@v1.0.2

References

https://github.com/free5gc/free5gc/security/advisories/GHSA-27ph-8q4f-h7m7[ADVISORY]
https://github.com/free5gc/bsf/commit/277908565fd628d974a13ef562b81a8b7b519ffa[FIX]
https://github.com/free5gc/bsf/pull/7[FIX]
https://github.com/free5gc/free5gc/issues/926[WEB]