GHSA-ww5p-j6cj-6mqqPublished
Nezha Monitoring: DDNS and Notification credential exposure via unredacted list API
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-59155 · Microsoft / collected KEV context
cve-program · CVE-2026-59155
- https://github.com/nezhahq/nezha/security/advisories/GHSA-ww5p-j6cj-6mqq
- https://github.com/nezhahq/nezha/commit/39d398066d8c644fe452f74704e34ada6c7ab61e
- https://github.com/nezhahq/nezha/releases/tag/v2.2.5
euvd · EUVD-2026-43108
- https://github.com/nezhahq/nezha/security/advisories/GHSA-ww5p-j6cj-6mqq
- https://github.com/nezhahq/nezha/commit/39d398066d8c644fe452f74704e34ada6c7ab61e
- https://github.com/nezhahq/nezha/releases/tag/v2.2.5
nvd · CVE-2026-59155
- https://github.com/nezhahq/nezha/commit/39d398066d8c644fe452f74704e34ada6c7ab61e
- https://github.com/nezhahq/nezha/releases/tag/v2.2.5
- https://github.com/nezhahq/nezha/security/advisories/GHSA-ww5p-j6cj-6mqq
osv · GHSA-ww5p-j6cj-6mqq
- https://github.com/nezhahq/nezha/security/advisories/GHSA-ww5p-j6cj-6mqq
- https://github.com/nezhahq/nezha
osv · GO-2026-5832
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.