Threats tagged 'ghsa-qjpp-gffx-2wm9'

CVE-2026-100394 is a race condition vulnerability in nezhahq's Nezha dashboard affecting versions 2.2.7 through 2.2.10. A low-privilege user can cause a nil pointer dereference crash in the service-monitor worker by racing service report and delete operations on their own service. This crash kills the entire dashboard process, causing a denial of service affecting all tenants' web UI, REST API, and agent connections. The issue is fixed in version 2.2.11 and later.