GO-2026-5687
Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification in github.com/nezhahq/nezha
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2026-46717
- Alias
- GHSA-w4g9-mxgg-j532
Description
Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification in github.com/nezhahq/nezha
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/nezhahq/nezha | introduced 1.4.0, fixed 1.14.15-0.20260517022419-d06d539d34c1 |
Références
- https://github.com/nezhahq/nezha/security/advisories/GHSA-w4g9-mxgg-j532 ADVISORY
- https://github.com/nezhahq/nezha/commit/d06d539d34c143d842b91e2a64326e8c8f9bc405 FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |