Skip to content
OpenAdvisories

Package · Go

github.com/naiba/nezha

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.1
    CVE-2026-48119

    Nezha Monitoring: Authenticated agents can forge service-monitor results for other users' services

    Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.12, authenticated agents can forge service-monitor results for other users' services. This issue has been patched in vers…

    nezhahq nezha github.com/nezhahq/nezha github.com/naiba/nezha Go
  • Medium 6.4
    CVE-2026-47268

    Nezha Monitoring: Authenticated DDNS webhook configuration allows blind SSRF from the dashboard host

    Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.10, an authenticated Nezha dashboard user can create or update a DDNS profile with provider webhook and configure an arbi…

    nezhahq nezha github.com/nezhahq/nezha github.com/naiba/nezha Go