—
GO-2026-5139
nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation in github.com/juev/nebula-mesh
Quick fix
GO-2026-5139 — github.com/juev/nebula-mesh: upgrade to the fixed version with the command below.
go get github.com/juev/nebula-mesh@v0.3.4Details
nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation in github.com/juev/nebula-mesh
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/juev/nebula-mesh
Introduced in:
0Fixed in: 0.3.4Fix
go get github.com/juev/nebula-mesh@v0.3.4