tenant-boundary

• GHSA-q6xx-5vr8-p898 - Nezha WebSocket stream ownership bypass 2026-06-27
• CVE-2026-53999 - Radius controller confused-deputy delete 2026-06-13
• CVE-2026-47724 - nebula-mesh API ownership authorization bypass 2026-06-11
• CVE-2026-48119 - Nezha service-monitor result forgery 2026-06-06
• Source code audit - auth and tenant boundaries 2026-06-06