GHSA-9pg3-25fq-p6ccPublished
nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-47768 · Microsoft / collected KEV context
cve-program · CVE-2026-47768
- https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-9pg3-25fq-p6cc
- https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.2
nvd · CVE-2026-47768
- https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.2
- https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-9pg3-25fq-p6cc
osv · GHSA-9pg3-25fq-p6cc
- https://github.com/juev/nebula-mesh/security/advisories/GHSA-9pg3-25fq-p6cc
- https://github.com/juev/nebula-mesh
osv · GO-2026-5294
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.