Known Vulnerabilities for Nezha by Nezhahq
Listed below are 10 of the newest known vulnerabilities associated with "Nezha" by "Nezhahq".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111387 json | Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve t... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-111386 json | Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated members to enumerat... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-111385 json | Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.download_url... | Not Provided | 2026-10-16 | 2026-10-21 |
| CVE-2026-111384 json | Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file manager WebSocket endpoint because... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-111383 json | Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows authenticated users to open unbounde... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-105113 json | Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non-deferred mutex unlock leaks o... | Not Provided | 2026-10-03 | 2026-10-05 |
| CVE-2026-105112 json | Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated non-a... | Not Provided | 2026-10-03 | 2026-10-05 |
| CVE-2026-101090 json | Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboard_host... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-101089 json | Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcry... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-101088 json | Nezha is a server and website monitoring tool. In versions >= 2.2.11 and < 2.3.1, the service sentinel worker (service/single... | Not Provided | 2026-09-27 | 2026-09-30 |