Security
فارسی
All products

github.com/free5gc/udr

Go · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
free5gc UDR improper path validation allows unauthenticated deletion of Traffic Influence SubscriptionsCVE-2026-40246 · GHSA-G9CW-QWHF-24JPVersion ranges need review. github.com/free5gc/udr Go High No fix reported
free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)CVE-2026-44324 · GHSA-JQFC-GWJ5-3W63Version ranges need review. github.com/free5gc/udr Go Medium Fix reported
free5gc UDR fail-open request handling in PolicyDataSubsToNotifySubsIdPut may allow unintended subscription updates after input errorsCVE-2026-40249 · GHSA-GX38-8H33-PMXRVersion ranges need review. github.com/free5gc/udr Go Medium No fix reported
free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creationCVE-2026-40343 · GHSA-JWCH-W7WH-GQJMVersion ranges need review. github.com/free5gc/udr Go Medium No fix reported
free5gc UDR improper path validation allows unauthenticated creation and modification of Traffic Influence SubscriptionsCVE-2026-40248 · GHSA-JGQ2-QV8V-5CMJVersion ranges need review. github.com/free5gc/udr Go High No fix reported
free5gc UDR improper path validation allows unauthenticated access to Traffic Influence SubscriptionsCVE-2026-40247 · GHSA-X5R2-R74C-3W28Version ranges need review. github.com/free5gc/udr Go High No fix reported
free5gc UDR nudr-dr influenceData/subs-to-notify leaks SUPI in error response body without authenticationCVE-2026-40245 · GHSA-WRWH-RPQ4-87HFVersion ranges need review. github.com/free5gc/udr Go High No fix reported
free5GC UDR has improper `ueId` validation in EE subscription handlers that allows arbitrary identifier persistenceCVE-2026-47780 · GHSA-6GXQ-GPR8-XGJPVersion ranges need review. github.com/free5gc/udr Go Medium No fix reported
free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing subsId when UE state exists (nil pointer dereference)CVE-2026-44323 · GHSA-4RQF-GRM6-VF75Version ranges need review. github.com/free5gc/udr Go Medium Fix reported