blob: ad74bfae0ee9d1d05bbcab8ac6751806bd3ff994 [file] [edit]
id: GO-2026-5741
modules:
- module: github.com/free5gc/udr
unsupported_versions:
- last_affected: 1.4.2
vulnerable_at: 1.4.3
summary: |-
free5gc UDR improper path validation allows unauthenticated access to Traffic
Influence Subscriptions in github.com/free5gc/udr
cves:
- CVE-2026-40247
ghsas:
- GHSA-x5r2-r74c-3w28
references:
- advisory: https://github.com/free5gc/free5gc/security/advisories/GHSA-x5r2-r74c-3w28
- advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-40247
source:
id: GHSA-x5r2-r74c-3w28
created: 2026-06-25T15:31:52.662727747-04:00
review_status: UNREVIEWED