Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/26 11:4 p.m.18 views

Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS

Description The Nezha dashboard exposes two endpoints that create long-lived WebSocket streams to monitored agents: - POST /api/v1/terminal → createTerminal terminal.go:27-67 - POST /api/v1/file → createFM fm.go:28-67 Both call rpc.NezhaHandlerSingleton.CreateStreamstreamId, ... which inserts a...

6.5CVSS6.1AI score0.0029EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder