github.com/free5gc/smf
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating | github.com/free5gc/smf | Go | High | Fix reported | |
| free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) | github.com/free5gc/smf | Go | High | No fix reported | |
| free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers | github.com/free5gc/smf | Go | Critical | Fix reported |