GO-2026-4458
Blocklist Bypass possible via ECDSA Signature Malleability in github.com/slackhq/nebula
At a glance
- Published
- Updated
- CVE
- CVE-2026-25793
- Aliases
- GHSA-69x3-g4r3-p962
Description
Blocklist Bypass possible via ECDSA Signature Malleability in github.com/slackhq/nebula
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/slackhq/nebula | introduced 1.7.0, fixed 1.10.3 |
References
- https://github.com/slackhq/nebula/security/advisories/GHSA-69x3-g4r3-p962 ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2026-25793 ADVISORY
- https://github.com/slackhq/nebula/commit/f573e8a26695278f9d71587390fbfe0d0933aa21 FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |