tocsin

CVE-2026-47725

2 advisories.

Go/github.com/juev/nebula-mesh CVE-2026-47725: high

nebula-mesh's web UI lacks CSRF tokens on /ui/* mutating endpoints

Action: Upgrade github.com/juev/nebula-mesh to 0.3.3 or later.

go get github.com/juev/nebula-mesh@v0.3.3

Affected

introducedfixedlast affected
00.3.3-

Fixed versions

0.3.3

Sources

CVE-2026-47725 · published · modified · JSON

Go/github.com/juev/nebula-mesh CVE-2026-47725: unknown

nebula-mesh's web UI lacks CSRF tokens on /ui/* mutating endpoints in github.com/juev/nebula-mesh

Action: Upgrade github.com/juev/nebula-mesh to 0.3.3 or later.

go get github.com/juev/nebula-mesh@v0.3.3

Affected

introducedfixedlast affected
00.3.3-

Fixed versions

0.3.3

Sources

CVE-2026-47725 · published · modified · JSON