{"action":"Upgrade github.com/nezhahq/nezha to 0.0.0-20260721131105-c893aa57867d or later.","affected":[{"fixed":"0.0.0-20260721131105-c893aa57867d","introduced":"0.0.0-20260628010923-fd31e5f1b0f8"}],"component":"github.com/nezhahq/nezha","cve_ids":["CVE-2026-100394"],"ecosystem":"Go","exploited":false,"fixed_versions":["0.0.0-20260721131105-c893aa57867d"],"ghsa_id":"GHSA-qjpp-gffx-2wm9","id":"tcs_01M5JJPBB304MW6790JJZWE3CG","modified_at":"2026-10-19T21:41:12.039280394Z","published_at":"2026-10-15T20:15:06Z","references":["https://osv.dev/vulnerability/GHSA-qjpp-gffx-2wm9","https://github.com/nezhahq/nezha/security/advisories/GHSA-qjpp-gffx-2wm9","https://nvd.nist.gov/vuln/detail/CVE-2026-100394","https://github.com/nezhahq/nezha/commit/c893aa57867d8a3d608e2f2f16d1594c9766cdf3","https://github.com/nezhahq/nezha","https://github.com/nezhahq/nezha/releases/tag/v2.2.11","https://github.com/nezhahq/nezha/releases/tag/v2.3.0"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-qjpp-gffx-2wm9","url":"https://osv.dev/vulnerability/GHSA-qjpp-gffx-2wm9"}],"summary":"Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant"}