EUVD-2026-36598

Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwtsecretkey...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the NoRoute process in the dashboard component when the fallbackToFrontend logic incorrectly interprets URLs starting with /dashboard as admin-frontend asset requests. An attacker can access sensitive files,...