| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/slackhq/nebula | ≥ 1.9.4, < 1.9.7 | 1.9.7 |
Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free