step-ca
github.com/slackhq/nebula
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
nebula v1.10.3 fixes GHSA-69x3-g4r3-p962 but introduces breaking API changes that are incompatible with the step-ca nebula provisioner. The types nebula.NebulaCAPool, nebula.NebulaCertificate, nebula.NewCAPoolFromBytes, and nebula.UnmarshalNebulaCertificate used in authority/provisioner/nebula.go were removed or renamed in v1.10.3, causing compilation failures. Upstream smallstep/certificates pins nebula at v1.9.7 and cannot upgrade until these API incompatibilities are resolved.
Upstream pin: https://github.com/smallstep/certificates/blob/v0.29.0/go.mod Fix version: github.com/slackhq/nebula v1.10.3 Upstream advisory: https://github.com/advisories/GHSA-69x3-g4r3-p962
Status