Forgekeep Nebula-mesh vulnerabilities
- forgekeep nebula-mesh Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private` 7.7 High
- forgekeep nebula-mesh nebula-mesh: Certificate revocation is never enforced at the mesh 8.1 High
- forgekeep nebula-mesh nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens 5.4 Medium
- forgekeep nebula-mesh nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting 5.3 Medium
- forgekeep nebula-mesh nebula-mesh: Operator session tokens stored in plaintext in the database 7.1 High
- forgekeep nebula-mesh nebula-mesh: CA private key not zeroized on web mobile-bundle error paths 7.1 High
- forgekeep nebula-mesh nebula-mesh - Host revocation is not durable: blocked/offboarded hosts can regain a valid certificate 6.9 Medium