SCA: security update for github.com/juev/nebula-mesh (GHSA-v2jf-442r-6mjh)

high Tenable Cloud Security Plugin ID 444070

Description

nebula-mesh: Signed-poll nonce LRU is in-memory and bounded; replay survives restart + eviction

Solution

Update the github.com/juev/nebula-mesh library and its related packages to version 0.3.4 or later.

See Also

https://github.com/advisories/GHSA-v2jf-442r-6mjh

Plugin Details

Severity: High

ID: 444070

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 6/27/2026

Updated: 6/27/2026

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 6/26/2026

Vulnerability Publication Date: 6/26/2026

Reference Information

cwe: CWE-294