Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification in github.com/nezhahq/nezha
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2026-5687" }
"https://vuln.go.dev/ID/GO-2026-5687.json"