VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/free5gc/amf: vulnerability history, versions and safety

github.com/free5gc/amf is a package in the Go ecosystem. Vulert records 9 vulnerabilities for it across 85 releases, from Dec 2023 to Jun 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
9 vulnerabilities recorded H1 M3 L1 U4
i
7 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
8 in the last 12 months

Most recent disclosure 25 Jun 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/free5gc/amf vulnerabilities

Vulert verdict on github.com/free5gc/amf v1.4.6 i

Updated on 23 Oct 2026

Careful: v1.4.6 has 9 known vulnerabilities, and 7 have no fix yet. Use an earlier safe version, or the workaround listed for each one.

Package health score 50/100
  • Security Unfixed issues
  • Maintenance Sustainable
  • Popularity Little adoption
  • Community Quiet

The current release has a vulnerability with no published fix, which caps this score.

What to do: Pin an earlier, unaffected release if you can, and apply the workaround each vulnerability lists until a fix is published. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v1.4.6 — affected i
  • Vulnerabilities on record 9 over 2 years · 8 in the last year i
  • Latest disclosure 25 Jun 2026 i
  • Highest CVSS 7.5 i
  • With no published fix 7 i
  • Stars 23 i
  • OpenSSF scorecard 4/10 i
  • Last release this month i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/free5gc/amf, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.4.7-0.20261019041626-b1324994722a 19 Oct 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.7-0.20261002084252-602c7ea4921a 02 Oct 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.6 30 Sep 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.6-0.20260923073309-e67795601082 23 Sep 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.6-0.20260820083932-4bfa50992227 20 Aug 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.6-0.20260819160657-9ba8d971463e 19 Aug 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.6-0.20260724064513-b096bab46a60 24 Jul 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.5 24 Jun 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.5-0.20260610092642-204568737787 10 Jun 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.5-0.20260527044601-dbfb9a500aa3 27 May 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.5-0.20260518005910-dcc3045ef859 18 May 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.5-0.20260512064537-13d0f7bbb329 12 May 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.4 11 May 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.4-0.20260429064757-ed76c707d88c 29 Apr 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.4-0.20260423015829-035e1ae62973 23 Apr 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.3 08 Apr 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.3-0.20260408092751-02675d949f20 08 Apr 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.3-0.20260317001320-76940837b7b5 17 Mar 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.3-0.20260310083004-84aa5d866f94 10 Mar 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.3-0.20260306074636-52e9386401ce 06 Mar 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.3-0.20260302181407-05eb3904d48d 02 Mar 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.3-0.20260302180143-fcd94eed7f84 02 Mar 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.2 23 Feb 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.2-0.20260130003652-80032b15ce70 30 Jan 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.1 04 Jan 2026 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.1-0.20251009105842-6ece5b56b09d 09 Oct 2025 H1 M3 L1 U4 Apache-2.0 No Details →
v1.4.0 31 Jul 2025 H1 M3 L1 U4 Apache-2.0 No Details →
v1.3.3-0.20250718142415-cd9f67756fa7 18 Jul 2025 H1 M3 L1 U4 Apache-2.0 No Details →
v1.3.2 17 Apr 2025 H1 M3 L1 U4 Apache-2.0 No Details →
v1.3.1 03 Mar 2025 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.7 10 Feb 2025 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.7-0.20250102025209-4b12b0d16481 02 Jan 2025 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.6 11 Oct 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.6-0.20241011033955-ce90b7bda0e4 11 Oct 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.5 31 Aug 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.5-0.20240831100240-299aeb99d8a2 31 Aug 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.5-0.20240723010152-9443d1b98ccb 23 Jul 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.5-0.20240701023336-4f4889586bcc 01 Jul 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.4 25 Jun 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.4-0.20240625100829-4fbee4306a74 25 Jun 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v0.0.0-20240503144020-1b5c19b34ba4 03 May 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.4-0.20240503144020-1b5c19b34ba4 03 May 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.3 27 Mar 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.3-0.20240327155848-4d01bec21acc 27 Mar 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.3-0.20240314004913-9ecb352390d0 14 Mar 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.2 22 Feb 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.2-0.20240222072513-b70ed87ebfe3 22 Feb 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.1 06 Feb 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.1-0.20240206093425-5cd14b2b9c73 06 Feb 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.1-0.20240205155917-c19b0b4ed025 05 Feb 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.1-0.20240109103518-9458f7952b43 09 Jan 2024 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.1-0.20231219092252-7a721dfd5fd7 19 Dec 2023 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.1-0.20231201145438-6fc612c35997 01 Dec 2023 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.1-0.20231028091859-aebc9fca0b87 28 Oct 2023 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.1-0.20231001100550-d7ec30fedfcc 01 Oct 2023 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.1-0.20230823153609-80b4f277cce1 23 Aug 2023 H1 M3 L1 U4 Apache-2.0 No Details →
v1.2.1-0.20230616151025-bb8718ead5b4 16 Jun 2023 H1 M3 L1 U4 Apache-2.0 No Details →
v1.1.2-0.20230508115732-aab2417f9f57 08 May 2023 H1 M3 L1 U4 Apache-2.0 No Details →
v1.1.2-0.20230502090556-6c8f769f7b6c 02 May 2023 H1 M3 L1 U4 Apache-2.0 No Details →
v1.1.2-0.20230406062914-cc530b5258f6 06 Apr 2023 H1 M3 L1 U4 Apache-2.0 No Details →
v1.1.2-0.20221027003535-4011455b7bf5 27 Oct 2022 H1 M3 L1 U4 Apache-2.0 No Details →
v1.1.2-0.20220707081118-60d91371d4c1 07 Jul 2022 H1 M3 L1 U4 Apache-2.0 No Details →
v1.1.2-0.20220701155834-ddc52f158596 01 Jul 2022 H1 M3 L1 U4 Apache-2.0 No Details →
v1.1.1 02 May 2022 H1 M3 L1 U4 Apache-2.0 No Details →
v1.1.1-0.20220502152337-a3bd5358ec55 02 May 2022 H1 M3 L1 U4 Apache-2.0 No Details →
v1.1.1-0.20220407143730-03f9848ead18 07 Apr 2022 H1 M3 L1 U4 Apache-2.0 No Details →
v1.0.3-0.20220322073006-bad00337b405 22 Mar 2022 H1 M3 L1 U4 Apache-2.0 No Details →
v1.0.2 01 Mar 2022 H1 M3 L1 U4 Apache-2.0 No Details →
v1.0.2-0.20220104072005-3241cae95ddc 04 Jan 2022 H1 M3 L1 U4 Apache-2.0 No Details →
v1.0.1 24 Sep 2021 H1 M3 L1 U4 Apache-2.0 No Details →
v1.0.1-0.20210730045433-8709c72aec04 30 Jul 2021 H1 M3 L1 U4 Apache-2.0 No Details →
v1.0.1-0.20210710084640-706be3a855b0 10 Jul 2021 H1 M3 L1 U4 Apache-2.0 No Details →
v1.0.1-0.20210430053620-5977a8746947 30 Apr 2021 H1 M3 L1 U4 Apache-2.0 No Details →
v1.0.1-0.20210417033832-ceafa4ab1920 17 Apr 2021 H1 M3 L1 U4 Apache-2.0 No Details →
v1.0.1-0.20210311165046-9e49609720a8 11 Mar 2021 H1 M3 L1 U4 Apache-2.0 No Details →
v1.0.1-0.20210213071545-1a16a4223ea9 13 Feb 2021 H1 M3 L1 U4 Apache-2.0 No Details →
v1.0.0 30 Jan 2021 H1 M3 L1 U4 Apache-2.0 No Details →
v1.3.0 18 Jan 2021 H1 M3 L1 U4 Apache-2.0 No Details →
v0.0.0-20210115120631-73e0c9719fab 15 Jan 2021 H1 M3 L1 U4 Apache-2.0 No Details →
v0.0.0-20201227144831-1425e2dda2bf 27 Dec 2020 H1 M3 L1 U4 Apache-2.0 No Details →
v0.0.0-20201211055546-b6c4c1a78bfb 11 Dec 2020 H1 M3 L1 U4 Apache-2.0 No Details →
v0.0.0-20201201111954-fd8fac80a6ab 01 Dec 2020 H1 M3 L1 U4 Apache-2.0 No Details →
v0.0.0-20200928130222-1b92f8cf5b08 28 Sep 2020 H1 M3 L1 U4 — No Details →
v0.0.0-20200827054305-14c3a68c936b 27 Aug 2020 H1 M3 L1 U4 — No Details →
v0.0.0-20200721045732-d2349f9ddbea 21 Jul 2020 H1 M3 L1 U4 — No Details →

All 85 versions Vulert tracks for this package. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2023 1
  • 2026 8

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 8 of the 9 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/free5gc/amf

The 5 most severe of 9 vulnerabilities recorded for this package

Search all 9 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2023-49391: free5GC AMF Denial of Service Vulnerability 7.5 high No fix published 22 Dec 2023
CVE-2026-42081: Free5GC AMF Security Bypass in PathSwitchRequest Handling 6.1 medium No fix published 07 May 2026
CVE-2026-41136: free5GC AMF Missing Default Case in Content-Type Switch Leading to Uninitialized Request Handling 5.5 medium No fix published 22 Apr 2026
CVE-2026-4531: Free5GC AMF Denial of Service Vulnerability in HandleRegistrationComplete Function 5.3 medium 1.4.3-0.20260306074636-52e9386401ce 22 Mar 2026
CVE-2026-42082: Free5GC AMF Concurrent NAS SMC Validation Flaw 3.7 low No fix published 07 May 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/free5gc/amf

Is github.com/free5gc/amf safe to use?

Vulert records 9 vulnerabilities for github.com/free5gc/amf in Go: 0 critical, 1 high, 3 medium and 1 low, plus 4 not yet rated. 7 of them have no published fix yet, so those are the ones to avoid or mitigate.

What is github.com/free5gc/amf's Vulert package health score?

Vulert scores github.com/free5gc/amf 50/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15). The current release has a vulnerability with no published fix, which caps this score.

Is the latest version of github.com/free5gc/amf affected?

Yes. v1.4.6, the version you would install today, has 9 known vulnerabilities, and 7 has no published fix yet. Use an earlier unaffected release, or the workaround each vulnerability lists.

Which version of github.com/free5gc/amf should I use?

v1.4.6 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/free5gc/amf have?

9 vulnerabilities are recorded for github.com/free5gc/amf in the Go ecosystem: 0 critical, 1 high, 3 medium and 1 low, plus 4 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/free5gc/amf vulnerabilities disclosed?

8 vulnerabilities were recorded for github.com/free5gc/amf in the last 12 months, and the oldest entry in this database dates to 22 Dec 2023. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/free5gc/amf are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/free5gc/amf for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/free5gc/amf version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.