Product by Go
Github.com/forgekeep/nebula-mesh
8 known vulnerabilities in Github.com/forgekeep/nebula-mesh (Go), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-61699 | nebula-mesh: Certificate revocation is never enforced at the mesh | 8.1 | |
| High | CVE-2026-63464 | Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private` | 7.7 | |
| Medium | CVE-2026-48025 | nebula-mesh: Decrypted CA private key persists in heap after signing | — | |
| Medium | CVE-2026-55512 | Forgekeep Nebula-mesh: Uncontrolled Resource Consumption | 5.3 | |
| High | CVE-2026-53603 | nebula-mesh: Operator session tokens stored in plaintext in the database | — | |
| Medium | CVE-2026-53602 | Forgekeep Nebula-mesh: Missing Authorization | — | |
| High | CVE-2026-53604 | nebula-mesh: CA private key not zeroized on web mobile-bundle error paths | — | |
| Medium | CVE-2026-55513 | Forgekeep Nebula-mesh: Insufficient Session Expiration | 5.4 |