tocsin

CVE-2026-53602

2 advisories.

Go/github.com/forgekeep/nebula-mesh CVE-2026-53602: medium, EPSS 0.31%

nebula-mesh: Host revocation is not durable - blocked/offboarded hosts can regain a valid certificate

Action: Upgrade github.com/forgekeep/nebula-mesh to 0.3.7 or later.

go get github.com/forgekeep/nebula-mesh@v0.3.7

Affected

introducedfixedlast affected
00.3.7-

Fixed versions

0.3.7

Sources

CVE-2026-53602 · published · modified · JSON

Go/github.com/forgekeep/nebula-mesh CVE-2026-53602: unknown, EPSS 0.31%

nebula-mesh: Host revocation is not durable - blocked/offboarded hosts can regain a valid certificate in github.com/forgekeep/nebula-mesh

Action: Upgrade github.com/forgekeep/nebula-mesh to 0.3.7 or later.

go get github.com/forgekeep/nebula-mesh@v0.3.7

Affected

introducedfixedlast affected
00.3.7-

Fixed versions

0.3.7

Sources

CVE-2026-53602 · published · modified · JSON