github.com/ellanetworks/core
Ella Core is a mobile core designed for private networks.
View on Github
Activity
- Latest release
- 2d ago
- Total releases
- 50
- Cadence
- ~8 days
- Last 12 months
- 33
Reach
- Stars
- 96
Details
- First release
- Jan 05, 2025
| Version | Released | |
|---|---|---|
v1.15.0
minor
|
v1.15.0
minor
Dependencies (42)
+ 34 more |
|
v1.14.0
minor
|
v1.14.0
minor
Dependencies (43)
+ 35 more |
|
v1.13.0
minor
|
v1.13.0
minor
Dependencies (41)
+ 33 more |
|
v1.12.0
minor
|
v1.12.0
minor
Dependencies (38)
+ 30 more |
|
v1.11.1
patch
|
v1.11.1
patch
Dependencies (38)
+ 30 more |
|
v1.11.0
minor
|
v1.11.0
minor
Dependencies (36)
+ 28 more |
|
v1.10.2
patch
|
v1.10.2
patch
Dependencies (36)
+ 28 more |
|
v1.10.1
patch
|
v1.10.1
patch
Dependencies (36)
+ 28 more |
|
v1.10.0
minor
|
v1.10.0
minor
Dependencies (36)
+ 28 more |
|
v1.9.1
patch
3 CVEs
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev |
v1.9.1
patch
Dependencies (22)
+ 14 more |
|
v1.9.0
minor
3 CVEs
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev |
v1.9.0
minor
Dependencies (22)
+ 14 more |
|
v1.8.1
patch
3 CVEs
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev |
v1.8.1
patch
Dependencies (23)
+ 15 more |
|
v1.8.0
minor
3 CVEs
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev |
v1.8.0
minor
Dependencies (23)
+ 15 more |
|
v1.7.0
minor
5 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev |
v1.7.0
minor
Dependencies (22)
+ 14 more |
|
v1.6.0
minor
9 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev |
v1.6.0
minor
Dependencies (22)
+ 14 more |
|
v1.5.2
patch
12 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev |
v1.5.2
patch
Dependencies (22)
+ 14 more |
|
v1.5.1
patch
12 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev |
v1.5.1
patch
Dependencies (22)
+ 14 more |
|
v1.5.0
minor
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v1.5.0
minor
Dependencies (22)
+ 14 more |
|
v1.4.0
minor
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v1.4.0
minor
Dependencies (22)
+ 14 more |
|
v1.3.0
minor
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v1.3.0
minor
Dependencies (22)
+ 14 more |
|
v1.2.0
minor
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v1.2.0
minor
Dependencies (22)
+ 14 more |
|
v1.1.0
minor
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v1.1.0
minor
Dependencies (22)
+ 14 more |
|
v1.0.0
major
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v1.0.0
major
Dependencies (22)
+ 14 more |
|
v0.7.0
minor
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.7.0
minor
Dependencies (22)
+ 14 more |
|
v0.6.0
minor
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.6.0
minor
Dependencies (25)
+ 17 more |
|
v0.5.0
minor
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.5.0
minor
Dependencies (25)
+ 17 more |
|
v0.4.2
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.4.2
patch
Dependencies (24)
+ 16 more |
|
v0.4.1
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.4.1
patch
Dependencies (24)
+ 16 more |
|
v0.4.0
minor
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.4.0
minor
Dependencies (23)
+ 15 more |
|
v0.3.1
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.3.1
patch
Dependencies (23)
+ 15 more |
|
v0.3.0
minor
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.3.0
minor
Dependencies (23)
+ 15 more |
|
v0.2.0
minor
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.2.0
minor
Dependencies (23)
+ 15 more |
|
v0.1.0
minor
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.1.0
minor
Dependencies (24)
+ 16 more |
|
v0.0.20
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.20
patch
Dependencies (24)
+ 16 more |
|
v0.0.19
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.19
patch
Dependencies (24)
+ 16 more |
|
v0.0.18
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.18
patch
Dependencies (25)
+ 17 more |
|
v0.0.17
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.17
patch
Dependencies (20)
+ 12 more |
|
v0.0.16
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.16
patch
Dependencies (20)
+ 12 more |
|
v0.0.15
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.15
patch
Dependencies (20)
+ 12 more |
|
v0.0.14
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.14
patch
Dependencies (20)
+ 12 more |
|
v0.0.13
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.13
patch
Dependencies (20)
+ 12 more |
|
v0.0.12
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.12
patch
Dependencies (20)
+ 12 more |
|
v0.0.11
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.11
patch
Dependencies (20)
+ 12 more |
|
v0.0.10
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.10
patch
Dependencies (20)
+ 12 more |
|
v0.0.9
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.9
patch
Dependencies (20)
+ 12 more |
|
v0.0.8
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.8
patch
Dependencies (19)
+ 11 more |
|
v0.0.7
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.7
patch
Dependencies (19)
+ 11 more |
|
v0.0.6
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.6
patch
Dependencies (19)
+ 11 more |
|
v0.0.5
patch
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.5
patch
Dependencies (19)
+ 11 more |
|
v0.0.4
initial
14 CVEs
CVE-2026-34762
GO-2026-5770
GHSA-xw45-cc32-442f
Jun 25, 2026
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44475
GO-2026-5554
GHSA-pwfh-mqp3-pqwj
Jun 25, 2026
Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44473
GO-2026-5581
GHSA-qfxw-v8qx-vj3v
Jun 25, 2026
Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44474
GO-2026-5502
GHSA-mc29-hmx6-856q
Jun 25, 2026
Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Ella Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core Fixed in
1.10.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-34761
GO-2026-5177
GHSA-6gm8-3g4h-w82m
Jun 25, 2026
Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Ella Core Panics Upon NGAP handover failure in github.com/ellanetworks/core Fixed in
1.8.0
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-33906
GO-2026-4873
GHSA-87j9-m7x6-hvw2
Apr 02, 2026
Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33907
GO-2026-4872
GHSA-55q8-2gwx-29pc
Apr 02, 2026
Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33903
GO-2026-4875
GHSA-f2f3-9cx3-wcmf
Apr 02, 2026
Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33904
GO-2026-4874
GHSA-9h59-p45g-445h
Apr 02, 2026
Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core Fixed in
1.7.0
References Updated Apr 02, 2026 · Source: OSV.dev
CVE-2026-33282
GO-2026-4780
GHSA-826q-wrq4-p23x
Mar 23, 2026
Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33281
GO-2026-4783
GHSA-q669-4gmv-g8mf
Mar 23, 2026
Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-33283
GO-2026-4776
GHSA-3366-gw57-fcm5
Mar 23, 2026
Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core Fixed in
1.6.0
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32320
GO-2026-4691
GHSA-j478-p7vq-3347
Mar 13, 2026
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-32319
GO-2026-4692
GHSA-m9pm-w3gv-c68f
Mar 13, 2026
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core Fixed in
1.5.1
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.0.4
initial
Dependencies (19)
+ 11 more |