—
GO-2026-4758
free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request in github.com/free5gc/udm
Quick fix
GO-2026-4758 — github.com/free5gc/udm: upgrade to the fixed version with the command below.
go get github.com/free5gc/udm@v1.4.2Details
free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request in github.com/free5gc/udm
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/free5gc/free5gc/security/advisories/GHSA-958m-gxmc-mccm[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2026-33065[ADVISORY]
- https://github.com/free5gc/udm/commit/88de9fa74a1b3f3522e53b4cfa2d184712ffa4ee[FIX]
- https://github.com/free5gc/udm/pull/79[FIX]
- https://github.com/free5gc/free5gc/issues/783[WEB]