- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 14 · 4 high, 8 medium, 2 low
- Registry
- pkg.go.dev
Advisories 14
- CVE-2026-44473High 7.1
Ella Core: UE Downlink Redirection via Forged PDUSessionResourceSetupResponse
Affected: fixed in 1.10.0.
- CVE-2026-44475Medium 6.1
Ella Core: UE Security Capability bypass on NGAP PathSwitchRequest
Affected: fixed in 1.10.0.
- CVE-2026-44474Low 3.7
Ella Core: Handover failures during concurrent Security Mode Command
Affected: fixed in 1.10.0.
- CVE-2026-34762Low 2.7
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber
Affected: fixed in 1.8.0.
- CVE-2026-34761Medium 5.8
Ella Core Panics Upon NGAP handover failure
Affected: fixed in 1.8.0.
- CVE-2026-33907Medium 6.5
Ella Core Panics during NAS Authentication Response/Failure with missing IEs
Affected: fixed in 1.7.0.
- CVE-2026-33906High 7.2
Ella Core has Privilege Escalation via Database Restore by NetworkManager role
Affected: fixed in 1.7.0.
- CVE-2026-33904Medium 6.5
Ella Core has a Denial of Service via SCTP connection cleanup deadlock
Affected: fixed in 1.7.0.
- CVE-2026-33903Medium 6.5
Ella Core panics when processing a crafted NGAP LocationReport message
Affected: fixed in 1.7.0.
- CVE-2026-33283Medium 6.5
Ella Core panics on malformed ULNASTransport Message without a Request Type
Affected: fixed in 1.6.0.
- CVE-2026-33282High 7.5
Ella Core panics on malformed NGAP Location Report
Affected: fixed in 1.6.0.
- CVE-2026-33281Medium 6.5
Ella Core panics on invalid PDU Session IDs in NGAP messages
Affected: fixed in 1.6.0.
- CVE-2026-32320Medium 6.5
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings
Affected: fixed in 1.5.1.
- CVE-2026-32319High 7.5
Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload
Affected: fixed in 1.5.1.