Skip to content
OpenAdvisories

Package · Go

github.com/free5gc/nrf

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2026-44325

    free5GC: NRF POST /oauth2/token structured-form parser type-confusion panic family (Reflect.Set on incompatible types)

    free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NRF root SBI endpoint POST /oauth2/token contains a parser-level type-confusion bug family. The handler in NFs/nrf/internal/sbi/api_accesstoken.go reflects over models.…

    free5gc free5gc github.com/free5gc/nrf Go
  • High 8.7
    CVE-2026-33062

    free5GC NRF Discovery EncodeGroupId Function Panics on Malformed group-id-list Parameter

    free5GC is an open source 5G core network. free5GC NRF prior to version 1.4.2 has an Improper Input Validation vulnerability leading to Denial of Service. All deployments of free5GC using the NRF discovery service are affected. The `EncodeGroupId` function at…

    free5gc nrf github.com/free5gc/nrf Go
  • Critical 9.1
    CVE-2025-66719

    Free5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF value

    An issue was discovered in Free5gc NRF 1.4.0. In the access-token generation logic of free5GC, the AccessTokenScopeCheck() function in file internal/sbi/processor/access_token.go bypasses all scope validation when the attacker uses a crafted targetNF value. T…

    github.com/free5gc/nrf Go