| id: GO-2026-5049 | |
| modules: | |
| - module: github.com/juev/nebula-mesh | |
| versions: | |
| - fixed: 0.3.3 | |
| vulnerable_at: 0.3.2 | |
| summary: nebula-mesh's web UI lacks CSRF tokens on /ui/* mutating endpoints in github.com/juev/nebula-mesh | |
| cves: | |
| - CVE-2026-47725 | |
| ghsas: | |
| - GHSA-273q-qgh5-wrj6 | |
| references: | |
| - advisory: https://github.com/juev/nebula-mesh/security/advisories/GHSA-273q-qgh5-wrj6 | |
| source: | |
| id: GHSA-273q-qgh5-wrj6 | |
| created: 2026-06-16T13:36:45.182331-04:00 | |
| review_status: UNREVIEWED |