CVE-2026-48119

Go/github.com/nezhahq/nezha CVE-2026-48119: high 7.1

Nezha's authenticated agents can forge service-monitor results for other users' services

Action: Upgrade github.com/nezhahq/nezha to 1.14.15-0.20260521020202-02129f16fb15 or later.

go get github.com/nezhahq/nezha@v1.14.15-0.20260521020202-02129f16fb15

go get github.com/nezhahq/nezha@v2.0.12

Affected

Fixed versions

Sources

• osv: GHSA-4g6j-g789-rghm
• https://github.com/nezhahq/nezha/security/advisories/GHSA-4g6j-g789-rghm
• https://nvd.nist.gov/vuln/detail/CVE-2026-48119
• https://github.com/nezhahq/nezha/commit/02129f16fb1572ef57c7e8dd7d03f84d39b8b586
• https://github.com/nezhahq/nezha

CVE-2026-48119 · published 2026-06-01T14:05:06Z · modified 2026-08-11T20:51:14.550659643Z · JSON

Go/github.com/naiba/nezha CVE-2026-48119: unknown

Nezha's authenticated agents can forge service-monitor results for other users' services in github.com/nezhahq/nezha

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5119
• https://github.com/nezhahq/nezha/security/advisories/GHSA-4g6j-g789-rghm
• https://github.com/nezhahq/nezha/commit/02129f16fb1572ef57c7e8dd7d03f84d39b8b586

CVE-2026-48119 · published 2026-08-11T20:19:48Z · modified 2026-08-11T20:45:07.508591998Z · JSON

Go/github.com/nezhahq/nezha CVE-2026-48119: unknown

Nezha's authenticated agents can forge service-monitor results for other users' services in github.com/nezhahq/nezha

Action: Upgrade github.com/nezhahq/nezha to 1.14.15-0.20260521020202-02129f16fb15 or later.

go get github.com/nezhahq/nezha@v1.14.15-0.20260521020202-02129f16fb15

Affected

Fixed versions

Sources

• osv: GO-2026-5119#Go/github.com/nezhahq/nezha
• https://github.com/nezhahq/nezha/security/advisories/GHSA-4g6j-g789-rghm
• https://github.com/nezhahq/nezha/commit/02129f16fb1572ef57c7e8dd7d03f84d39b8b586

CVE-2026-48119 · published 2026-08-11T20:19:48Z · modified 2026-08-11T20:45:07.508591998Z · JSON