forgekeep nebula-mesh

• CVE-2026-63464 High 7.7 Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private` 0.5%
• CVE-2026-61699 High 8.1 nebula-mesh: Certificate revocation is never enforced at the mesh 0.4%
• CVE-2026-55513 Medium 5.4 nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens 0.3%
• CVE-2026-55512 Medium 5.3 nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting 0.6%
• CVE-2026-53604 High 7.1 nebula-mesh: CA private key not zeroized on web mobile-bundle error paths 0.2%
• CVE-2026-53603 High 7.1 nebula-mesh: Operator session tokens stored in plaintext in the database 0.4%
• CVE-2026-53602 Medium 6.9 nebula-mesh - Host revocation is not durable: blocked/offboarded hosts can regain a valid certificate 0.3%