Improper Certificate Validation

Nebula is vulnerable to Improper Certificate Validation. The vulnerability is due to ECDSA signature malleability in P256 certificates, which allows an attacker to generate a certificate with a different fingerprint and bypass certificate fingerprint-based blocklist entries...