Go/github.com/omec-project/amf CVE-2026-9299: medium 6.3, EPSS 0.23%
omec-project amf Vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer in github.com/omec-project/amf
Action: Upgrade github.com/omec-project/amf to 1.7.1-0.20260421213846-34bc6724acc9 or later.
go get github.com/omec-project/amf@v1.7.1-0.20260421213846-34bc6724acc9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.1-0.20260421213846-34bc6724acc9 | - |
Fixed versions
| 1.7.1-0.20260421213846-34bc6724acc9 |
Sources
- osv: GO-2026-5843
- nvd: CVE-2026-9299
- https://github.com/advisories/GHSA-m9r6-r5c3-jw4j
- https://github.com/omec-project/amf/commit/34bc6724acc97dba1f8691e586da95b042cb612d
- https://github.com/omec-project/amf/pull/666
- https://github.com/omec-project/amf/issues/681
- https://vuldb.com/submit/811829
- https://vuldb.com/vuln/365246
- https://vuldb.com/vuln/365246/cti
CVE-2026-9299 · published · modified · JSON