github.com/free5gc/nrf vulnerabilities (Go)

3 vulnerabilities.

• github.com/free5gc/nrf Go free5GC: NRF POST /oauth2/token structured-form parser type-confusion panic family (Reflect.Set on incompatible types) CVE-2026-44325 Fix available 7.5 HighMay 8, 2026
• github.com/free5gc/nrf Go free5GC NRF Discovery EncodeGroupId Function Panics on Malformed group-id-list Parameter CVE-2026-33062 Fix available 8.7 HighMarch 18, 2026
• github.com/free5gc/nrf Go Free5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF value CVE-2025-66719 Fix available 9.1 CriticalJanuary 23, 2026