Skip to content
Nebula Docs
Search
Ctrl
K
Cancel
Menu
Get started
Introduction to Nebula
Guides
Quick start
How hosts find each other
NAT traversal and firewalls
Running as non-root
Signing without a key
Rotating a CA
Lighthouse DNS
Unsafe routes
SSH debug commands
Upgrading to IPv6
Viewing Nebula logs
Security bulletins
2025-10-07 - Source IP spoofing defect
Config reference
pki
static_host_map
static_map
lighthouse
listen
punchy
cipher
preferred_ranges
relay
tun
tunnels
sshd
logging
firewall
routines
stats
handshakes
local_range
Security bulletins
Security bulletins
Security bulletins for the Nebula overlay networking tool.
2025-10-07 - Source IP spoofing defect
Nebula v1.9.4 to v1.9.6 contains an issue where Nebula could incorrectly accept and process a packet from an erroneous source IP when the sender's certificate is configured with unsafe_routes.
