CVE-2026-48025

3 advisories.

Go/github.com/juev/nebula-mesh CVE-2026-48025: medium, EPSS 0.51%

nebula-mesh: Decrypted CA private key persists in heap after signing

Action: Upgrade github.com/juev/nebula-mesh to 0.3.7 or later.

go get github.com/juev/nebula-mesh@v0.3.7

introduced	fixed	last affected
0	0.3.7	-

0.3.7

CVE-2026-48025 · published 2026-06-10T18:34:29Z · modified 2026-06-26T21:00:09.480246138Z · JSON

nebula-mesh: Decrypted CA private key persists in heap after signing

Action: Upgrade github.com/forgekeep/nebula-mesh to 0.3.7 or later.

go get github.com/forgekeep/nebula-mesh@v0.3.7

introduced	fixed	last affected
0	0.3.7	-

0.3.7

CVE-2026-48025 · published 2026-06-10T18:34:29Z · modified 2026-06-26T21:00:09.480246138Z · JSON

nebula-mesh: Decrypted CA private key persists in heap after signing in github.com/forgekeep/nebula-mesh

Action: Upgrade github.com/forgekeep/nebula-mesh to 0.3.7 or later.

go get github.com/forgekeep/nebula-mesh@v0.3.7

introduced	fixed	last affected
0	0.3.7	-

0.3.7

CVE-2026-48025 · published 2026-06-25T18:43:15Z · modified 2026-06-25T19:45:22.853334296Z · JSON