{"id":"GO-2026-5478","revision":"07e179a539dd4c1a9f38d93c4f2dadff","records":[{"revision":"07e179a539dd4c1a9f38d93c4f2dadff","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5478","aliases":["CVE-2026-44324","GHSA-jqfc-gwj5-3w63"],"title":"free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request) in github.com/free5gc/udr","description":"free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request) in github.com/free5gc/udr","state":0,"publishedAt":"2026-06-25T22:34:31+00:00","modifiedAt":"2026-06-25T23:01:14.8808701+00:00","affected":[{"ecosystem":"Go","name":"github.com/free5gc/udr","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.4.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/free5gc/free5gc/security/advisories/GHSA-jqfc-gwj5-3w63","https://nvd.nist.gov/vuln/detail/CVE-2026-44324","https://github.com/free5gc/udr/commit/8a1d3c63be99d378806d771f086ff32f1867da99","https://github.com/free5gc/udr/pull/60","https://github.com/free5gc/free5gc/issues/920"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5478","license":"OSV · upstream source license applies","key":"osv:GO-2026-5478","identifiers":["GO-2026-5478","CVE-2026-44324","GHSA-jqfc-gwj5-3w63"]},"retained":false,"historicalAffected":[]}],"coverage":[]}