Skip to content
OpenAdvisories

Vendor

nezhahq

31 known vulnerabilities.

Products

nezha 31
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-101089

    Nezha before 2.2.7 Information Disclosure via /api/v1/profile

    Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authenticated users. Attackers can extract password hashes and perform offline cracking attacks without ra…

    nezhahq nezha