{"id":"GO-2026-5698","revision":"d07cd5e9c3c548e3aa8625f148501c85","records":[{"revision":"d07cd5e9c3c548e3aa8625f148501c85","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5698","aliases":["CVE-2026-47723","GHSA-w7w5-5gcp-38rw"],"title":"nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.) in github.com/juev/nebula-mesh","description":"nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.) in github.com/juev/nebula-mesh","state":0,"publishedAt":"2026-06-25T22:34:38+00:00","modifiedAt":"2026-06-25T23:01:38.7781882+00:00","affected":[{"ecosystem":"Go","name":"github.com/juev/nebula-mesh","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.3.1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/juev/nebula-mesh/security/advisories/GHSA-w7w5-5gcp-38rw","https://github.com/forgekeep/nebula-mesh/commit/b45fda5476c41ffcff1ca23058aef0fb851359c1","https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.1"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5698","license":"OSV · upstream source license applies","key":"osv:GO-2026-5698","identifiers":["GO-2026-5698","CVE-2026-47723","GHSA-w7w5-5gcp-38rw"]},"retained":false,"historicalAffected":[]}],"coverage":[]}