{"id":"GO-2025-4068","revision":"3be06ac3f28042a585f41b93e1fd432d","records":[{"revision":"3be06ac3f28042a585f41b93e1fd432d","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4068","aliases":["CVE-2025-62820","GHSA-x6fh-7qmf-69xh"],"title":"Slack Nebula may accept arbitrary source IP addresses in github.com/slackhq/nebula","description":"Slack Nebula may accept arbitrary source IP addresses in github.com/slackhq/nebula","state":0,"publishedAt":"2025-10-30T15:02:33+00:00","modifiedAt":"2026-02-04T03:45:44.247567+00:00","affected":[{"ecosystem":"Go","name":"github.com/slackhq/nebula","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.9.4"},{"kind":"fixed","version":"1.9.7"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-x6fh-7qmf-69xh","https://nvd.nist.gov/vuln/detail/CVE-2025-62820","https://github.com/slackhq/nebula/commit/e264a0ff888c7bf0568579306755a60fc42f6ecc","https://github.com/slackhq/nebula/pull/1493","https://github.com/slackhq/nebula/pull/1494"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4068","license":"OSV · upstream source license applies","key":"osv:GO-2025-4068","identifiers":["GO-2025-4068","CVE-2025-62820","GHSA-x6fh-7qmf-69xh"]},"retained":false,"historicalAffected":[]}],"coverage":[]}