github.com/free5gc/smf
Activity
- Latest release
- 3mo ago
- Total releases
- 20
- Cadence
- ~2 months
- Last 12 months
- 5
Reach
- Stars
- 24
Details
- First release
- Jan 18, 2021
| Version | Released | |
|---|---|---|
v1.4.5
patch
1 CVE
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev |
v1.4.5
patch
Dependencies (19)
+ 11 more |
|
v1.4.4
patch
1 CVE
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev |
v1.4.4
patch
Dependencies (19)
+ 11 more |
|
v1.4.3
patch
1 CVE
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev |
v1.4.3
patch
Dependencies (19)
+ 11 more |
|
v1.4.2
patch
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.4.2
patch
Dependencies (19)
+ 11 more |
|
v1.4.1
patch
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.4.1
patch
Dependencies (19)
+ 11 more |
|
v1.4.0
minor
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.4.0
minor
Dependencies (19)
+ 11 more |
|
v1.3.2
patch
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.3.2
patch
Dependencies (18)
+ 10 more |
|
v1.3.1
patch
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.3.1
patch
Dependencies (18)
+ 10 more |
|
v1.2.7
patch
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.2.7
patch
Dependencies (20)
+ 12 more |
|
v1.2.6
patch
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.2.6
patch
Dependencies (20)
+ 12 more |
|
v1.2.5
patch
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.2.5
patch
Dependencies (20)
+ 12 more |
|
v1.2.4
patch
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.2.4
patch
Dependencies (20)
+ 12 more |
|
v1.2.3
patch
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.2.3
patch
Dependencies (19)
+ 11 more |
|
v1.2.2
patch
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.2.2
patch
Dependencies (19)
+ 11 more |
|
v1.2.1
minor
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.2.1
minor
Dependencies (19)
+ 11 more |
|
v1.1.1
minor
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.1.1
minor
Dependencies (17)
+ 9 more |
|
v1.0.2
patch
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.0.2
patch
Dependencies (24)
+ 16 more |
|
v1.0.1
patch
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.0.1
patch
Dependencies (24)
+ 16 more |
|
v1.0.0
initial
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.0.0
initial
Dependencies (24)
+ 16 more |
|
v1.3.0
minor
3 CVEs
CVE-2026-44328
GO-2026-5537
GHSA-p9mg-74mg-cwwr
Jun 25, 2026
free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf Fixed in
1.4.3
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44321
GO-2026-5109
GHSA-44qj-cghf-9p97
Jun 25, 2026
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-44329
GO-2026-4995
GHSA-3258-qmv8-frp3
May 20, 2026
free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf Fixed in
1.4.3
References Updated May 20, 2026 · Source: OSV.dev |
v1.3.0
minor
Dependencies (25)
+ 17 more |