StackRadar

CVE-2026-32937

High

Advisory

Published 18 Mar 2026In the index since 13 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2
of 17,781 indexed, latest versions
Container images
1
deployed by those charts
Fix available
1 of 1
affected package

Out-of-Bounds Slice Access in free5GC CHF Leading to DoS

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 1 image.

Affected packageAffected versionsFixed inImages
github.com/free5gc/chfgolangv1.0.11.2.21
OSV records
GHSA-6g43-577r-wf4x
Also known as
GO-2026-4750

Charts affected

2 by stars
ChartLatestAffected imagesRadar Score
free5gcfree5gcVerified publisher0.1.31 of 12See more

free5gc free5gc 0.1.3

1 of the 12 container images this version deploys carry CVE-2026-32937.

Container imageDigestPackageFixed in
free5gc/webui:v3.4.39adeb18492cb
github.com/free5gc/chf@v1.0.1
1.2.2

Open the chart page →

10,693
free5gc-webuifree5gc-webuiVerified publisher0.1.31 of 1See more

free5gc-webui free5gc-webui 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-32937.

Container imageDigestPackageFixed in
free5gc/webui:v3.4.39adeb18492cb
github.com/free5gc/chf@v1.0.1
1.2.2

Open the chart page →

1,249

Container images carrying it

1 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
free5gc/webui:v3.4.39adeb18492cb
github.com/free5gc/chf@v1.0.1
1.2.2
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.