nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.)

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-47723 · Microsoft / collected KEV context

GHSA-w7w5-5gcp-38rw

GO-2026-5698

cve-program · CVE-2026-47723

• https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-w7w5-5gcp-38rw
• https://github.com/forgekeep/nebula-mesh/commit/b45fda5476c41ffcff1ca23058aef0fb851359c1
• https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.1

nvd · CVE-2026-47723

• https://github.com/forgekeep/nebula-mesh/commit/b45fda5476c41ffcff1ca23058aef0fb851359c1
• https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.1
• https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-w7w5-5gcp-38rw

osv · GHSA-w7w5-5gcp-38rw

• https://github.com/juev/nebula-mesh/security/advisories/GHSA-w7w5-5gcp-38rw
• https://github.com/forgekeep/nebula-mesh/commit/b45fda5476c41ffcff1ca23058aef0fb851359c1
• https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.1
• https://github.com/juev/nebula-mesh

osv · GO-2026-5698

• https://github.com/juev/nebula-mesh/security/advisories/GHSA-w7w5-5gcp-38rw
• https://github.com/forgekeep/nebula-mesh/commit/b45fda5476c41ffcff1ca23058aef0fb851359c1
• https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.1

No related operational record is retained in the current change model.