Go/github.com/free5gc/nrf CVE-2026-33062: high, EPSS 0.69%

free5GC NRF Discovery EncodeGroupId Function Panics on Malformed group-id-list Parameter

Action: Upgrade github.com/free5gc/nrf to 1.4.2 or later.

go get github.com/free5gc/nrf@v1.4.2

Affected

Fixed versions

Sources

• osv: GHSA-7c47-xr7q-p6hg
• https://github.com/free5gc/free5gc/security/advisories/GHSA-7c47-xr7q-p6hg
• https://nvd.nist.gov/vuln/detail/CVE-2026-33062
• https://github.com/free5gc/free5gc/issues/777
• https://github.com/free5gc/nrf/pull/80
• https://github.com/free5gc/nrf/commit/dac77d8f8f2e0f041c5634fb3c685dcb9734b872
• https://github.com/free5gc/free5gc

CVE-2026-33062 · published 2026-03-18T20:05:31Z · modified 2026-03-23T18:56:04.158991Z · JSON