{"id":"GO-2026-6794","revision":"a3e41b21bdae4d13b5a837def4e83e4a","records":[{"revision":"a3e41b21bdae4d13b5a837def4e83e4a","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6794","aliases":["CVE-2026-100394","GHSA-qjpp-gffx-2wm9"],"title":"Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant in github.com/nezhahq/nezha","description":"Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant in github.com/nezhahq/nezha","state":0,"publishedAt":"2026-10-19T21:08:35+00:00","modifiedAt":"2026-10-19T21:31:38.3074247+00:00","affected":[{"ecosystem":"Go","name":"github.com/nezhahq/nezha","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.0.0-20260628010923-fd31e5f1b0f8"},{"kind":"fixed","version":"0.0.0-20260721131105-c893aa57867d"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/nezhahq/nezha/security/advisories/GHSA-qjpp-gffx-2wm9","https://nvd.nist.gov/vuln/detail/CVE-2026-100394","https://github.com/nezhahq/nezha/commit/c893aa57867d8a3d608e2f2f16d1594c9766cdf3","https://github.com/nezhahq/nezha/releases/tag/v2.2.11","https://github.com/nezhahq/nezha/releases/tag/v2.3.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6794","license":"OSV · upstream source license applies","key":"osv:GO-2026-6794","identifiers":["GO-2026-6794","CVE-2026-100394","GHSA-qjpp-gffx-2wm9"]},"retained":false,"historicalAffected":[]}],"coverage":[]}