—

GO-2026-4692

Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core

Quick fix

GO-2026-4692 — github.com/ellanetworks/core: upgrade to the fixed version with the command below.

go get github.com/ellanetworks/core@v1.5.1

Details

Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/ellanetworks/core

Introduced in: 0Fixed in: 1.5.1

Fixgo get github.com/ellanetworks/core@v1.5.1

References

https://github.com/ellanetworks/core/security/advisories/GHSA-m9pm-w3gv-c68f[ADVISORY]
https://github.com/ellanetworks/core/releases/tag/v1.5.1[WEB]