Affected by GO-2026-5255
and 4 other vulnerabilities
GO-2026-5255: nebula-mesh: Decrypted CA private key persists in heap after signing in github.com/forgekeep/nebula-mesh
GO-2026-5950: nebula-mesh: Host revocation is not durable - blocked/offboarded hosts can regain a valid certificate in github.com/forgekeep/nebula-mesh
GO-2026-5984: nebula-mesh: CA private key not zeroized on web mobile-bundle error paths in github.com/forgekeep/nebula-mesh
GO-2026-5986: nebula-mesh: Certificate revocation is never enforced at the mesh in github.com/forgekeep/nebula-mesh
GO-2026-5991: nebula-mesh: Operator session tokens stored in plaintext in the database in github.com/forgekeep/nebula-mesh
Each binary's main package declares its own ldflag-populated
`version`, `commit`, `date` variables and passes them to Print. When the
binary is built without ldflags (e.g. `go install`), missing fields are
filled from runtime/debug.ReadBuildInfo where possible.
func Print(w io.Writer, name, version, commit, date string)
Print writes a single-line version banner of the form
<name> <version> (<commit>, built <date>)
Empty / placeholder fields are filled from runtime/debug.ReadBuildInfo
when available so that `go install ...@latest` builds also produce a
useful banner.
func Resolve(version, commit, date string) (resolvedVersion, resolvedCommit, resolvedDate string)
Resolve returns the version triple, falling back to VCS info from the
embedded build info when the input fields are placeholders or empty.
Exported for testing.
Affected by 
Documentation
¶
Source Files