GO-2026-5645
Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check) in github.com/nezhahq/nezha
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2026-47120
- Alias
- GHSA-rxf6-wjh4-jfj6
Description
Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check) in github.com/nezhahq/nezha
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/nezhahq/nezha | introduced 1.4.0, fixed 1.14.15-0.20260517022419-d7526351cf97 |
Références
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |