—
GO-2025-4162
Free5GC is vulnerable to DoS via the Nudm_SubscriberDataManagement API in github.com/free5gc/openapi
Quick fix
GO-2025-4162 — github.com/free5gc/openapi: upgrade to the fixed version with the command below.
go get github.com/free5gc/openapi@v1.2.2Details
Free5GC is vulnerable to DoS via the Nudm_SubscriberDataManagement API in github.com/free5gc/openapi
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/free5gc/openapi
Introduced in:
0Fixed in: 1.2.2Fix
go get github.com/free5gc/openapi@v1.2.2Go/github.com/free5gc/udm
Introduced in:
0No fixed version published yet for github.com/free5gc/udm (go modules). Pin to a known-safe version or switch to an alternative.
References
- https://github.com/advisories/GHSA-3j9f-7w24-pcqg[ADVISORY]
- https://github.com/free5gc/openapi/commit/d50c83e8fe7ebf9a62d9de99517e21a17f627b52[FIX]
- https://github.com/free5gc/openapi/pull/65[FIX]
- https://github.com/free5gc/udm/commit/57c56a3ad4bc53a62cab259045e78ec9abdb98ca[FIX]
- https://github.com/free5gc/udm/commit/ca9976857909a422dcff5bf2228756fc2bfc80d1[FIX]
- https://github.com/free5gc/udm/commit/e776c42177817f75e75e7a587c58c2a027beed81[FIX]
- https://github.com/free5gc/udm/pull/63[FIX]
- https://github.com/free5gc/udm/pull/65[FIX]
- https://github.com/free5gc/udm/pull/66[FIX]
- https://github.com/free5gc/free5gc/issues/700[WEB]
- https://github.com/free5gc/free5gc/issues/701[WEB]
- https://github.com/free5gc/free5gc/issues/702[WEB]
- https://github.com/free5gc/free5gc/issues/703[WEB]