Go/github.com/juev/nebula-mesh CVE-2026-47724: critical 9.9, EPSS 0.48%
nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation
Action: Upgrade github.com/juev/nebula-mesh to 0.3.4 or later.
go get github.com/juev/nebula-mesh@v0.3.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.4 | - |
Fixed versions
| 0.3.4 |
Sources
- osv: GHSA-598g-h2vc-h5vg
- https://github.com/juev/nebula-mesh/security/advisories/GHSA-598g-h2vc-h5vg
- https://github.com/forgekeep/nebula-mesh/commit/9d8bcd7667ecd0c2975cc71fb35a02fe131f76f2
- https://github.com/juev/nebula-mesh
CVE-2026-47724 · published · modified · JSON