EUVD-2026-101303

Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant...

CVE-2026-100394

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11, ServiceSentinel.worker in service/singleton/servicesentinel.go checked an owned service under servicesLock and later dereferenced pointer-valued serviceStatusToday and...

CVE-2026-100394

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11, ServiceSentinel.worker in service/singleton/servicesentinel.go checked an owned service under servicesLock and later dereferenced pointer-valued serviceStatusToday and...

PT-2026-113775

Name of the Vulnerable Software and Affected Versions Nezha Monitoring versions 2.2.7 through 2.2.10 Description A nil pointer dereference occurs in the ServiceSentinel.worker function within service/singleton/servicesentinel.go. The issue arises when the worker checks an owned service under...

PT-2026-99713

Name of the Vulnerable Software and Affected Versions Nezha versions prior to 2.3.8 Description Authenticated non-administrator users can create malformed alert rules due to a lack of validation for alert rule types and duration bounds. By submitting a crafted alert rule via the 'POST...