{"id":"EUVD-2026-36602","enisaUuid":"6553dff9-18af-38d2-8f16-58a93a8c3579","description":"Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O\u0026M tool. From version 1.0.0 to before version 2.2.0, the getRedirectURL function in oauth2.go:22-29 constructs the OAuth2 callback URL by concatenating the request\u0027s Host header with a fixed path, with zero validation of the Host header. This can result in host header injection. This issue has been patched in version 2.2.0.","datePublished":"Jun 12, 2026, 9:04:46 PM","dateUpdated":"Jun 15, 2026, 9:35:45 PM","baseScore":6.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","references":"https://github.com/nezhahq/nezha/security/advisories/GHSA-9rc6-8cjv-rcvx\n","aliases":"CVE-2026-53523\nGHSA-9rc6-8cjv-rcvx\n","assigner":"GitHub_M","epss":0.29,"enisaIdProduct":[{"id":"9249ffdc-b233-3a0d-aeb7-b2bee5c7a4d1","product":{"name":"nezha","vendor":{"name":"nezhahq"}},"product_version":"1.0.0, \u003c 2.2.0"}],"enisaIdVendor":[{"id":"3b7a57a1-9305-353c-bc9c-cad393467ba5","vendor":{"name":"nezhahq"}}],"enisaIdVulnerability":[{"id":"07124931-4c1b-3c93-9b99-b554b7bd0587","vulnerability":{"id":"CVE-2026-53523","description":"Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O\u0026M tool. From version 1.0.0 to before version 2.2.0, the getRedirectURL function in oauth2.go:22-29 constructs the OAuth2 callback URL by concatenating the request\u0027s Host header with a fixed path, with zero validation of the Host header. This can result in host header injection. This issue has been patched in version 2.2.0.","datePublished":"Jun 12, 2026, 9:04:46 PM","dateUpdated":"Jun 15, 2026, 9:35:45 PM","status":"PUBLISHED","baseScore":6.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","references":"https://github.com/nezhahq/nezha/security/advisories/GHSA-9rc6-8cjv-rcvx\n","enisa_id":"EUVD-2026-36602\n","assigner":"GitHub_M","epss":0.29,"dataProcessed":"Nov 7, 2026, 7:20:34 AM","vulnerabilityProduct":[{"id":"8970d2bd-9a87-3e15-8e04-22eb206dc23b","product":{"name":"nezha","vendor":{"name":"nezhahq"}},"product_version":"1.0.0, \u003c 2.2.0"}],"vulnerabilityVendor":[{"id":"7643cde5-45a7-3840-9d85-4b0397bff434","vendor":{"name":"nezhahq"}}]}},{"id":"cd01a71e-776f-36e5-8f6a-cf5c712043f6","vulnerability":{"id":"GHSA-9rc6-8cjv-rcvx","description":"Nezha Monitoring: OAuth2 Redirect URL — Host Header Injection","datePublished":"Jun 26, 2026, 11:05:19 PM","dateUpdated":"Jun 26, 2026, 11:05:19 PM","baseScore":0.0,"references":"https://github.com/nezhahq/nezha/security/advisories/GHSA-9rc6-8cjv-rcvx\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53523\nhttps://github.com/nezhahq/nezha\n","enisa_id":"EUVD-2026-36602\n","aliases":"GHSA-9rc6-8cjv-rcvx\nCVE-2026-53523\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}