Skip to content
OpenAdvisories

Package · Go

github.com/free5gc/nrf

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-44325

    free5GC: NRF POST /oauth2/token structured-form parser type-confusion panic family (Reflect.Set on incompatible types)

    free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NRF root SBI endpoint POST /oauth2/token contains a parser-level type-confusion bug family. The handler in NFs/nrf/internal/sbi/api_accesstoken.go reflects over models.…

    free5gc free5gc github.com/free5gc/nrf Go
  • High 8.7
    CVE-2026-33062

    free5GC NRF Discovery EncodeGroupId Function Panics on Malformed group-id-list Parameter

    free5GC is an open source 5G core network. free5GC NRF prior to version 1.4.2 has an Improper Input Validation vulnerability leading to Denial of Service. All deployments of free5GC using the NRF discovery service are affected. The `EncodeGroupId` function at…

    free5gc nrf github.com/free5gc/nrf Go