{"action":"Upgrade github.com/nezhahq/nezha to 0.0.0-20260721131105-c893aa57867d or later.","affected":[{"fixed":"0.0.0-20260721131105-c893aa57867d","introduced":"0.0.0-20260628010923-fd31e5f1b0f8"}],"component":"github.com/nezhahq/nezha","cve_ids":["CVE-2026-100394"],"ecosystem":"Go","exploited":false,"fixed_versions":["0.0.0-20260721131105-c893aa57867d"],"ghsa_id":"GHSA-qjpp-gffx-2wm9","id":"tcs_01M5JJ3GFAD1XGVQMWZD8BR87W","modified_at":"2026-10-19T21:31:38.307424732Z","published_at":"2026-10-19T21:08:35Z","references":["https://osv.dev/vulnerability/GO-2026-6794","https://github.com/nezhahq/nezha/security/advisories/GHSA-qjpp-gffx-2wm9","https://nvd.nist.gov/vuln/detail/CVE-2026-100394","https://github.com/nezhahq/nezha/commit/c893aa57867d8a3d608e2f2f16d1594c9766cdf3","https://github.com/nezhahq/nezha/releases/tag/v2.2.11","https://github.com/nezhahq/nezha/releases/tag/v2.3.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6794","url":"https://osv.dev/vulnerability/GO-2026-6794"}],"summary":"Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant in github.com/nezhahq/nezha"}