GHSA-6v92-ph9p-hrpc

Suggest an improvement
Source
https://github.com/advisories/GHSA-6v92-ph9p-hrpc
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-6v92-ph9p-hrpc/GHSA-6v92-ph9p-hrpc.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-6v92-ph9p-hrpc
Aliases
  • CVE-2026-8783
Published
2026-05-18T06:31:18Z
Modified
2026-05-28T23:00:18.053504394Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
AMF Vulnerable to Improper Resource Shutdown or Release
Details

A security vulnerability has been detected in omec-project amf up to 2.1.3-dev. This impacts the function UERadioCapabilityCheckResponse of the file ngap/dispatcher.go. Such manipulation leads to null pointer dereference. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.2.0 will fix this issue. Upgrading the affected component is advised. The same pull request fixes multiple security issues.

Database specific 
{
    "nvd_published_at": "2026-05-18T04:16:33Z",
    "cwe_ids": [
        "CWE-404"
    ],
    "severity": "LOW",
    "github_reviewed": true,
    "github_reviewed_at": "2026-05-28T22:43:37Z"
}
References

Affected packages

Go / github.com/omec-project/amf

Package

Name
github.com/omec-project/amf
View open source insights on deps.dev
Purl
pkg:golang/github.com/omec-project/amf

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.0

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-6v92-ph9p-hrpc/GHSA-6v92-ph9p-hrpc.json"