free5GC's NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler in github.com/free5gc/nef
{ "url": "https://pkg.go.dev/vuln/GO-2026-5326", "review_status": "UNREVIEWED" }
"https://vuln.go.dev/ID/GO-2026-5326.json"