nebula-mesh: Host advanced overrides allow YAML injection into agent config.yml

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-47722 · Microsoft / collected KEV context

GHSA-7hp6-g3pq-3pc3

GO-2026-5223

cve-program · CVE-2026-47722

• https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-7hp6-g3pq-3pc3
• https://github.com/forgekeep/nebula-mesh/issues/126
• https://github.com/forgekeep/nebula-mesh/commit/c1506f7344ab375a145a7449b193af3f19bb41ef

nvd · CVE-2026-47722

• https://github.com/forgekeep/nebula-mesh/commit/c1506f7344ab375a145a7449b193af3f19bb41ef
• https://github.com/forgekeep/nebula-mesh/issues/126
• https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-7hp6-g3pq-3pc3

osv · GHSA-7hp6-g3pq-3pc3

• https://github.com/juev/nebula-mesh/security/advisories/GHSA-7hp6-g3pq-3pc3
• https://github.com/forgekeep/nebula-mesh/issues/126
• https://github.com/forgekeep/nebula-mesh/commit/c1506f7344ab375a145a7449b193af3f19bb41ef
• https://github.com/juev/nebula-mesh

osv · GO-2026-5223

• https://github.com/juev/nebula-mesh/security/advisories/GHSA-7hp6-g3pq-3pc3
• https://github.com/forgekeep/nebula-mesh/commit/c1506f7344ab375a145a7449b193af3f19bb41ef
• https://github.com/forgekeep/nebula-mesh/issues/126

No related operational record is retained in the current change model.