{"id":"GO-2026-5586","revision":"a9f74b1298274686aba00f976814cb15","records":[{"revision":"a9f74b1298274686aba00f976814cb15","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5586","aliases":["CVE-2026-47726","GHSA-qm33-p5p9-f8vg"],"title":"nebula-mesh: GET /api/v1/audit-log discloses all entries to any operator in github.com/juev/nebula-mesh","description":"nebula-mesh: GET /api/v1/audit-log discloses all entries to any operator in github.com/juev/nebula-mesh","state":0,"publishedAt":"2026-06-25T22:34:34+00:00","modifiedAt":"2026-06-25T23:01:32.6208974+00:00","affected":[{"ecosystem":"Go","name":"github.com/juev/nebula-mesh","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.3.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/juev/nebula-mesh/security/advisories/GHSA-qm33-p5p9-f8vg","https://github.com/forgekeep/nebula-mesh/commit/8baaace54c2a23e7c351b3efab5a31ab07b125dc","https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.2"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5586","license":"OSV · upstream source license applies","key":"osv:GO-2026-5586","identifiers":["GO-2026-5586","CVE-2026-47726","GHSA-qm33-p5p9-f8vg"]},"retained":false,"historicalAffected":[]}],"coverage":[]}