CVE-2026-106805

A resource exhaustion vulnerability exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. The root cause is that the SMF fails to properly release allocated UE IP address resources when a PFCP Session Establishment Response is not received from the UPF . This allows an atta...

SUSE CVE-2026-42081

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not verify the UE Security Capabilities received in NGAP PathSwitchRequest messages against its locally stored values, as mandated by 3GPP TS 33.501 6.7.3.1. A malicious gNB can overwrite the...

Malicious Package

Overview epic-ue-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview epic-ue-spotlight is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview epic-ue-map is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview epic-ue-shared is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview epic-ue-newsletter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview epic-ue-blog is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview epic-ue-feed is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview epic-ue-header-footer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview epic-ue-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in epic-ue-spotlight (npm)

Source: amazon-inspector bd396aa1bdd76e462e346d6e3ab3dd2396963c3c215ff74a6a7c8aaff2ffebe0 The package epic-ue-spotlight was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in epic-ue-saleforce-form (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

Malicious code in epic-ue-shared (npm)

Source: amazon-inspector 2a220a35ab1fa1351b8d127d803958d4e0a15655b39bb6ca483051fe06b917ac The package epic-ue-shared was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in epic-ue-darkly (npm)

--- Credit: OpenSSF source...

Malicious code in epic-ue-newsletter (npm)

Source: amazon-inspector ae0d99aa0256288626cb1b1a5bd7972a92364f23c926ba6b5e19f39b0b72f3ee The package epic-ue-newsletter was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in epic-ue-components (npm)

Source: amazon-inspector 8be8aaeadc65eecac5d97a903d0ab829cbce32f8b021d50552e1d584a5329237 The package epic-ue-components was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in epic-ue-i18n (npm)

--- Credit: OpenSSF source...

Malicious code in epic-ue-utils (npm)

Source: amazon-inspector f4e16db0d1d5018730c673692184778fc3c0922802d00ac5dc54cf8b91f68ebe The package epic-ue-utils was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in epic-ue-map (npm)

Source: amazon-inspector 68b62e65cbc85d852bc2e31738a2297459105238bc83f37cdb6f47fa476a8d6c The package epic-ue-map was found to contain malicious code. --- Credit: OpenSSF source...