{"uuid": "5f4785fd-9d30-4d77-a070-10fa0ec0cbe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-101090", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwk63ekiv62v", "content": "Nezha 2.2.3 faces CRITICAL risk: OAuth2 open redirect (CVE-2026-101090) lets attackers hijack logins if dashboard_host is empty. Set to trusted value \u2014 no patch yet. https://radar.offseq.com/threat/cve-2026-101090-url-redirection-to-untrusted-site-open-redirect-in-nezhahq-nezha-17f76beacc249b5e #...", "creation_timestamp": "2026-09-28T01:30:27.618322Z"}