Vulnerabilities

TI-2026-20857 CVE-2026-25793 · GHSA-69x3-g4r3-p962

Nebula Has Possible Blocklist Bypass via ECDSA Signature Malleability

LOW 32

Nebula is a scalable overlay networking tool.

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00143 Published 2026-02-06 Fixed in 1.10.3 CWE-347

TI-2025-38991 CVE-2025-62820 · GHSA-x6fh-7qmf-69xh

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts…

LOW 22

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network.

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.0022 Published 2025-10-23 Fixed in 1.9.7 CWE-420

TI-2020-09222 CVE-2020-11498

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a…

MEDIUM 44

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tun_darwin.go or tun_windows.go.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03395 Published 2020-04-02 No fix listed CWE-22

TI-2019-10709 CVE-2019-14366 · GHSA-rwhh-hf6m-2cp8

WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code.

LOW 36

WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01677 Published 2019-11-12 No fix listed CWE-200

Vulnerabilities

Filters

Nebula Has Possible Blocklist Bypass via ECDSA Signature Malleability

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts…

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a…

WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code.