—
GO-2026-6161
free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure in github.com/free5gc/ausf
Quick fix
GO-2026-6161 — github.com/free5gc/ausf: upgrade to the fixed version with the command below.
go get github.com/free5gc/ausf@v1.4.5Details
free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure in github.com/free5gc/ausf
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/free5gc/free5gc
Introduced in:
0Fixed in: 4.2.2+incompatibleFix
go get github.com/free5gc/free5gc@v4.2.2+incompatibleReferences
- https://github.com/free5gc/free5gc/security/advisories/GHSA-qj55-47fp-p62j[ADVISORY]
- https://github.com/free5gc/ausf/commit/bfc4a10094dbacbd862baa4686829f3fcc06ce1e[FIX]
- https://github.com/free5gc/ausf/pull/61[FIX]
- https://github.com/free5gc/free5gc/issues/1048[REPORT]
- https://github.com/free5gc/ausf/releases/tag/v1.4.5[WEB]
- https://github.com/free5gc/free5gc/releases/tag/v4.2.2[WEB]