Nezha Monitor Security CVE — Please Update to 2.0.13 or Above ASAP

A critical security vulnerability has been disclosed in Nezha Monitor Dashboard versions prior to 2.0.13. The issue may allow unauthenticated attackers to access sensitive Dashboard files such as configuration or database files, potentially exposing secrets used for authentication. If you are running a Nezha Dashboard, please update to version 2.0.13 or above immediately. After upgrading, it is also recommended to rotate the jwt_secret_key, review access logs for suspicious requests such as attempts to read config.yaml or sqlite.db, and consider disabling high-risk agent features such as Web SSH, command execution, forced updates, and NAT if you only use Nezha for monitoring.

https://github.com/nezhahq/nezha/security/advisories/GHSA-5c25-7vpj-9mqh