CVE-2026-55512

3 advisories.

Go/github.com/forgekeep/nebula-mesh CVE-2026-55512: medium 5.3, EPSS 0.60%

nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting

Action: Upgrade github.com/forgekeep/nebula-mesh to 0.5.0 or later.

go get github.com/forgekeep/nebula-mesh@v0.5.0

introduced	fixed	last affected
0.2.0	0.5.0	-

0.5.0

CVE-2026-55512 · published 2026-07-14T20:19:32Z · modified 2026-07-23T18:11:40.273439258Z · JSON

Unauthenticated OIDC login in nebula-mesh allows unbounded memory allocation in github.com/forgekeep/nebula-mesh

Action: Upgrade github.com/forgekeep/nebula-mesh to 0.5.0 or later.

go get github.com/forgekeep/nebula-mesh@v0.5.0

introduced	fixed	last affected
0.4.0	0.5.0	-

0.5.0

CVE-2026-55512 · published 2026-07-23T17:33:45Z · modified 2026-07-23T18:00:23.854218059Z · JSON

Unauthenticated OIDC login in nebula-mesh allows unbounded memory allocation in github.com/forgekeep/nebula-mesh

Action: No fix published. Pin and monitor.

introduced	fixed	last affected
0.2.0	-	-

No fixed version in the source.

CVE-2026-55512 · published 2026-07-23T17:33:45Z · modified 2026-07-23T18:00:23.854218059Z · JSON