Skip to content
OpenAdvisories

Package · Go

github.com/juev/nebula-mesh

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low —
    GHSA-v2jf-442r-6mjh

    nebula-mesh: Signed-poll nonce LRU is in-memory and bounded; replay survives restart + eviction

    `internal/api/pop/nonce.go:25,40,86` + `internal/api/server.go:38` — the signed-poll nonce cache is an in-process LRU sized at 65,536 entries. `internal/api/updates.go:31` sets `pollClockSkew = 5 * time.Minute` as the replay window. ## Affected All released v…

    github.com/juev/nebula-mesh Go
  • Low —
    GHSA-6vgg-xhvh-38ff

    nebula-mesh: POST /api/v1/hosts/{id}/mobile-bundle response lacks Cache-Control: no-store

    `internal/api/mobile_bundle.go:62-66` sets only `Content-Type: application/yaml`. The Web-UI sibling at `internal/web/handlers.go:1316-1321` sets `Cache-Control: no-store`, `Pragma: no-cache`, `Expires: 0`, `X-Content-Type-Options: nosniff` — and has a test a…

    github.com/juev/nebula-mesh Go