Skip to content
OpenAdvisories

Package · Go

github.com/slackhq/nebula

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.6
    CVE-2026-25793

    Nebula Has Possible Blocklist Bypass via ECDSA Signature Malleability

    Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates (which is not the default configuration), it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Si…

    slackhq nebula github.com/slackhq/nebula Go
  • Medium 4.9
    CVE-2025-62820

    Slack Nebula may accept arbitrary source IP addresses

    Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network.

    Slack Nebula github.com/slackhq/nebula Go