github.com/nezhahq/nezha (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/nezhahq/nezha, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (8)

• CVE-2026-46716 — CVSS 9.9 (critical): Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8…
• CVE-2026-46717 — CVSS 7.7 (high): Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8…
• CVE-2026-49396 — CVSS 7.1 (high): Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version…
• CVE-2026-47120 — CVSS 7.1 (high): Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8…
• CVE-2026-48119 — CVSS 7.1 (high): Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version…
• CVE-2026-47124 — CVSS 6.5 (medium): Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.9…
• CVE-2026-47268 — CVSS 6.4 (medium): Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version…
• CVE-2026-49397 — CVSS 5.3 (medium): Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.0 to before version…