tocsin

CVE-2026-47724

2 advisories.

Go/github.com/juev/nebula-mesh CVE-2026-47724: critical 9.9

nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation

Action: Upgrade github.com/juev/nebula-mesh to 0.3.4 or later.

go get github.com/juev/nebula-mesh@v0.3.4

Affected

introducedfixedlast affected
00.3.4-

Fixed versions

0.3.4

Sources

CVE-2026-47724 · published · modified · JSON

Go/github.com/juev/nebula-mesh CVE-2026-47724: unknown

nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation in github.com/juev/nebula-mesh

Action: Upgrade github.com/juev/nebula-mesh to 0.3.4 or later.

go get github.com/juev/nebula-mesh@v0.3.4

Affected

introducedfixedlast affected
00.3.4-

Fixed versions

0.3.4

Sources

CVE-2026-47724 · published · modified · JSON