Threats affecting pkg:github/free5gc/amf

CVE-2026-41136 is a medium severity vulnerability in free5GC AMF versions prior to 1.4.3. The issue arises because the HTTPUEContextTransfer handler lacks a default case for unsupported Content-Type headers, causing deserialization to be skipped silently and the processor to receive an uninitialized request object. This behavior violates expected processing logic and may lead to unexpected application behavior. A fix was introduced in version 1.4.3.