Juev

9 CVEs across 1 Juev products. Browse Juev vulnerabilities, severities, and proof-of-concept exploits.

Juev products with known CVEs

ProductCVEs
Nebula-Mesh9
Juev CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-49258High8.82026-07-28Nebula Mesh is a self-hosted control plane for the Slack Nebula mesh VPN. In versions 0.3.5 and below, the web UI (/ui/*) does not apply the per-operator CA sc…
CVE-2026-480582026-07-28nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/web/session.go and internal/web/oidc…
CVE-2026-47768Medium5.52026-07-28nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redi…
CVE-2026-477262026-07-28nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/api/audit.go:12 — handleGetAuditLog…
CVE-2026-477252026-07-28nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.3, every /ui/* POST / PUT / PATCH / DELETE route…
CVE-2026-480252026-07-28nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.7, internal/pki/resolver.go:36-64 constructs a C…
CVE-2026-47724Critical9.92026-07-23nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.4, the `/api/v1/*` route surface trusts the bear…
CVE-2026-477232026-07-23nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.1, none of the response paths in `internal/web/`…
CVE-2026-477222026-07-23nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, `internal/configgen/generator.go:86,108,119`…