free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference
Go github.com/free5gc/udm · Upgrade to 1.4.2 or later · < 1.4.2 · CVE-2026-33064 · GHSA-7g27-v5wj-jr75
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Go github.com/free5gc/udm · Upgrade to 1.4.2 or later · < 1.4.2 · CVE-2026-33064 · GHSA-7g27-v5wj-jr75
Go github.com/free5gc/ausf · Upgrade to 1.4.2 or later · < 1.4.2 · CVE-2026-33063 · GHSA-4jrw-92fg-4jwx
Go github.com/free5gc/nrf · Upgrade to 1.4.2 or later · < 1.4.2 · CVE-2026-33062 · GHSA-7c47-xr7q-p6hg
PyPI mesop · Upgrade to 1.2.3 or later · <= 1.2.2 · CVE-2026-33057 · GHSA-gjgx-rvqr-6w6v · amended
FileStateSessionBackend leads to Application Denial of Service and File Write/DeletionPyPI mesop · Upgrade to 1.2.3 or later · <= 1.2.2 · CVE-2026-33054 · GHSA-8qvf-mr4w-9x2c · amended
Packagist statamic/cms · Upgrade to 6.7.0 or 5.73.14 by release line · >= 6.0.0-alpha.1, < 6.7.0; < 5.73.14 · CVE-2026-33172 · GHSA-7rcv-55mj-chg7
crates.io libp2p-gossipsub · Upgrade to 0.49.3 or later · < 0.49.3 · CVE-2026-33040 · GHSA-gc42-3jg7-rxr2
Maven io.qameta.allure:allure-generator · Upgrade to 2.38.0 or later · <= 2.37.0 · CVE-2026-33166 · GHSA-64hm-gfwq-jppw
npm parse-server · Upgrade to 9.6.0-alpha.35 (pre-release) or 8.6.50 by release line · >= 9.0.0, < 9.6.0-alpha.35; < 8.6.50 · CVE-2026-33163 · GHSA-5hmj-jcgp-6hff · amended
npm @apostrophecms/import-export · Upgrade to 3.5.3 or later · <= 3.5.2 · CVE-2026-32731 · GHSA-mwxc-m426-3f78 · amended
npm apostrophe · Upgrade to 4.28.0 or later · <= 4.27.1 · CVE-2026-32730 · GHSA-v9xm-ffx2-7h35 · amended
Maven org.jenkins-ci.main:jenkins-core · Upgrade to 2.555 or later · <= 2.554 · CVE-2026-33001 · GHSA-r6qv-frpc-q66c
Maven org.jenkins-ci.main:jenkins-core · Upgrade to 2.555 or later · >= 2.442, < 2.555 · CVE-2026-33002 · GHSA-phhv-63fh-rrc8
Go github.com/free5gc/chf · Upgrade to 1.2.2 or later · < 1.2.2 · CVE-2026-32937 · GHSA-6g43-577r-wf4x
npm socket.io-parser · Upgrade to 4.2.6, 3.4.4 or 3.3.5 by release line · < 3.3.5; >= 3.4.0, < 3.4.4; >= 4.0.0, < 4.2.6 · CVE-2026-33151 · GHSA-677m-j7p3-52f9 · amended
npm oneuptime · Upgrade to 10.0.34 or later · < 10.0.34 · CVE-2026-33143 · GHSA-g5ph-f57v-mwjc · amended
npm oneuptime · Upgrade to 10.0.34 or later · < 10.0.34 · CVE-2026-33142 · GHSA-gcg3-c5p2-cqgg · amended
PyPI pyspector · Upgrade to 0.1.7 or later · <= 0.1.6 · CVE-2026-33139 · GHSA-v3xv-8vc3-h2m6 · amended
npm h3 · Upgrade to 2.0.1-rc.15 (pre-release) or later · >= 2.0.0-0, < 2.0.1-rc.15 · CVE-2026-33131 · GHSA-3vj8-jmxq-cgj5 · amended
npm h3 · Upgrade to 2.0.1-rc.15 (pre-release) or 1.15.6 by release line · >= 2.0.0, <= 2.0.1-rc.14; < 1.15.6 · CVE-2026-33128 · GHSA-22cc-p3c6-wpvm · amended
npm @capgo/cli · Upgrade to 7.84.6 or later · < 7.84.6 · CVE-2026-56236 · GHSA-8mpm-q7mh-8fvh · amended
PyPI ujson · Upgrade to 5.12.0 or later · >= 5.1.0, <= 5.11.0 · CVE-2026-32875 · GHSA-c8rr-9gxc-jprv · amended
PyPI ujson · Upgrade to 5.12.0 or later · >= 5.4.0, <= 5.11.0 · CVE-2026-32874 · GHSA-wgvc-ghv9-3pmm · amended
Go github.com/dadrus/heimdall · Upgrade to 0.17.11 or later · >= 0.7.0-alpha, <= 0.17.10 · CVE-2026-32811 · GHSA-r8x2-fhmf-6mxp
Go github.com/buger/jsonparser · Upgrade to 1.1.2 or later · <= 1.1.1 · CVE-2026-32285 · GHSA-6g7g-w4f8-9c9x
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.