CVE-2026-101090 - nezhahq
Nezha version 2.2.3 can insert a fake website address into the login callback URL if the optional dashboard host setting is left blank. An attacker who tricks a user into starting a…

Too many irrelevant or confusing CVEs? Use stackflag.com

#nezhahq #Golang #CVE #infosec

CVE-2026-101090 - nezha
Nezha version 2.2.3 may use the web address supplied by an attacker during the OAuth2 login process instead of the correct server address when a specific setting is left blank. This can…

Too many irrelevant or confusing CVEs? Use stackflag.com

#nezha #nezhahq #CVE #infosec