{"id":"GO-2026-5687","revision":"55f201851ec949fbb3378353eb570805","records":[{"revision":"55f201851ec949fbb3378353eb570805","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5687","aliases":["CVE-2026-46717","GHSA-w4g9-mxgg-j532"],"title":"Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification in github.com/nezhahq/nezha","description":"Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification in github.com/nezhahq/nezha","state":0,"publishedAt":"2026-06-25T22:34:38+00:00","modifiedAt":"2026-06-25T23:01:40.0488715+00:00","affected":[{"ecosystem":"Go","name":"github.com/nezhahq/nezha","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.4.0"},{"kind":"fixed","version":"1.14.15-0.20260517022419-d06d539d34c1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/nezhahq/nezha/security/advisories/GHSA-w4g9-mxgg-j532","https://github.com/nezhahq/nezha/commit/d06d539d34c143d842b91e2a64326e8c8f9bc405"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5687","license":"OSV · upstream source license applies","key":"osv:GO-2026-5687","identifiers":["GO-2026-5687","CVE-2026-46717","GHSA-w4g9-mxgg-j532"]},"retained":false,"historicalAffected":[]}],"coverage":[]}