CVE-2026-46717
2 advisories.
Go/github.com/nezhahq/nezha CVE-2026-46717: high 8.5, EPSS 0.37%
Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification
Action: Upgrade github.com/nezhahq/nezha to 1.14.15-0.20260517022419-d06d539d34c1 or later.
go get github.com/nezhahq/nezha@v1.14.15-0.20260517022419-d06d539d34c1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | 1.14.15-0.20260517022419-d06d539d34c1 | - |
Fixed versions
| 1.14.15-0.20260517022419-d06d539d34c1 |
Sources
- osv: GHSA-w4g9-mxgg-j532
- https://github.com/nezhahq/nezha/security/advisories/GHSA-w4g9-mxgg-j532
- https://nvd.nist.gov/vuln/detail/CVE-2026-46717
- https://github.com/nezhahq/nezha/commit/d06d539d34c143d842b91e2a64326e8c8f9bc405
- https://github.com/nezhahq/nezha
CVE-2026-46717 · published · modified · JSON
Go/github.com/nezhahq/nezha CVE-2026-46717: unknown, EPSS 0.37%
Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification in github.com/nezhahq/nezha
Action: Upgrade github.com/nezhahq/nezha to 1.14.15-0.20260517022419-d06d539d34c1 or later.
go get github.com/nezhahq/nezha@v1.14.15-0.20260517022419-d06d539d34c1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | 1.14.15-0.20260517022419-d06d539d34c1 | - |
Fixed versions
| 1.14.15-0.20260517022419-d06d539d34c1 |
Sources
- osv: GO-2026-5687
- https://github.com/nezhahq/nezha/security/advisories/GHSA-w4g9-mxgg-j532
- https://github.com/nezhahq/nezha/commit/d06d539d34c143d842b91e2a64326e8c8f9bc405
CVE-2026-46717 · published · modified · JSON