All products

github.com/free5gc/pcf

Go · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
free5GC's PCF npcf-policyauthorization POST /app-sessions panics on suppFeat=1 with missing AfRoutReq via nil pointer dereferenceCVE-2026-44317 · GHSA-WWQH-7JM5-GJ7WVersion ranges need review. github.com/free5gc/pcf Go Medium Fix reported
free5GC's PCF npcf-smpolicycontrol POST /sm-policies panics on downstream UDR/OpenAPI 404 via nil pointer dereferenceCVE-2026-44316 · GHSA-WR8J-6CHW-GM6PVersion ranges need review. github.com/free5gc/pcf Go High Fix reported
free5GC PCF: Memory Leak via CORS Middleware Registration in HTTP Handler Leads to Denial of ServiceCVE-2026-41135 · GHSA-98CP-84M9-Q3QPVersion ranges need review. github.com/free5gc/pcf Go High Fix reported
Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPICVE-2026-42083 · GHSA-6RGM-GR97-X3J5Version ranges need review. github.com/free5gc/pcf Go High Fix reported
Free5GC is vulnerable to DoS through its Npcf_BDTPolicyControl POST APICVE-2025-60632 · GHSA-VGQ7-9R5R-J9V3Version ranges need review. github.com/free5gc/pcf Go Medium Fix reported