PkgSeer

Vulnerability GO-2026-6794

Unknown

5 hours ago

Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant in github.com/nezhahq/nezha

>=0.0.0-20260628010923-fd31e5f1b0f8 <0.0.0-20260721131105-c893aa57867d

Summary

Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant in github.com/nezhahq/nezha

Details

Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant in github.com/nezhahq/nezha

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant

>=0.0.0-20260628010923-fd31e5f1b0f8 <0.0.0-20260721131105-c893aa57867d GHSA-qjpp-gffx-2wm9

Nezha: OAuth2 redirect_uri Host header injection regression when dashboard_host is empty in github.com/nezhahq/nezha

v0.15.14 - v1.14.14 GO-2026-6486

Nezha: OAuth2 redirect_uri Host header injection regression when dashboard_host is empty

2.2.3 GHSA-rf68-8gjr-36q7

Nezha's authenticated agents can forge service-monitor results for other users' services in github.com/nezhahq/nezha

v1.0.0 - v1.14.14 GO-2026-5119

Nezha vulnerable to cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check in github.com/nezhahq/nezha

v0.15.14 - v1.14.14 GO-2026-5821

View all vulnerabilities for these packages

Impacted packages

github.com/nezhahq/nezha

Timeline

Published

5 hours ago

Fixed (v0.0.0-20260721131105-c893aa57867d)

3 months ago

Last Modified

4 hours ago