{"action":"Upgrade github.com/juev/nebula-mesh to 0.3.2 or later.","affected":[{"fixed":"0.3.2","introduced":"0"}],"component":"github.com/juev/nebula-mesh","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.3.2"],"ghsa_id":"GHSA-6vgg-xhvh-38ff","id":"tcs_01M5KF0WGP5DRWD6PS2FYEY1KS","modified_at":"2026-06-25T19:56:40.593877200Z","published_at":"2026-06-12T18:30:09Z","references":["https://osv.dev/vulnerability/GHSA-6vgg-xhvh-38ff","https://github.com/juev/nebula-mesh/security/advisories/GHSA-6vgg-xhvh-38ff","https://github.com/forgekeep/nebula-mesh/commit/c13d5b2c013b4b323bc0c87a6ecc6afba6384ee5","https://github.com/juev/nebula-mesh"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-6vgg-xhvh-38ff","url":"https://osv.dev/vulnerability/GHSA-6vgg-xhvh-38ff"}],"summary":"nebula-mesh: POST /api/v1/hosts/{id}/mobile-bundle response lacks Cache-Control: no-store"}