github.com/free5gc/udr vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-47780Mediumgithub.com/free5gc/udr: free5GC UDR has improper `ueId` validation in EE subscription handlers that allows arbitrary identifier persistence CVE-2026-44324Mediumgithub.com/free5gc/udr: free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)CVE-2026-44323Mediumgithub.com/free5gc/udr: free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing subsId when UE state exists (nil pointer dereference)CVE-2026-40343Mediumgithub.com/free5gc/udr: free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation CVE-2026-40249Mediumgithub.com/free5gc/udr: free5gc UDR fail-open request handling in PolicyDataSubsToNotifySubsIdPut may allow unintended subscription updates after input errors CVE-2026-40248Highgithub.com/free5gc/udr: free5gc UDR improper path validation allows unauthenticated creation and modification of Traffic Influence Subscriptions CVE-2026-40247Highgithub.com/free5gc/udr: free5gc UDR improper path validation allows unauthenticated access to Traffic Influence Subscriptions CVE-2026-40246Highgithub.com/free5gc/udr: free5gc UDR improper path validation allows unauthenticated deletion of Traffic Influence Subscriptions CVE-2026-40245Highgithub.com/free5gc/udr: free5gc UDR nudr-dr influenceData/subs-to-notify leaks SUPI in error response body without authentication

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo