{"action":"Upgrade github.com/juev/nebula-mesh to 0.3.2 or later.","affected":[{"fixed":"0.3.2","introduced":"0"}],"component":"github.com/juev/nebula-mesh","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.3.2"],"ghsa_id":"GHSA-6vgg-xhvh-38ff","id":"tcs_01M5KGJHPD18PTSHK12XM9JKF7","modified_at":"2026-06-25T19:45:15.220715078Z","published_at":"2026-06-25T18:43:15Z","references":["https://osv.dev/vulnerability/GO-2026-5191","https://github.com/juev/nebula-mesh/security/advisories/GHSA-6vgg-xhvh-38ff","https://github.com/forgekeep/nebula-mesh/commit/c13d5b2c013b4b323bc0c87a6ecc6afba6384ee5"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-5191","url":"https://osv.dev/vulnerability/GO-2026-5191"}],"summary":"nebula-mesh: POST /api/v1/hosts/{id}/mobile-bundle response lacks Cache-Control: no-store in github.com/juev/nebula-mesh"}