tocsin

Go/github.com/nezhahq/nezha CVE-2026-53523: unknown, EPSS 0.32%

Nezha Monitoring: OAuth2 Redirect URL — Host Header Injection in github.com/nezhahq/nezha

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
1.0.0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-53523 · published · modified · JSON