Go/github.com/sipcapture/homer-app CVE-2026-62253: critical 9.8
Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default) in github.com/sipcapture/homer-app
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-6673
- nvd: CVE-2026-62253
- https://github.com/sipcapture/homer/security/advisories/GHSA-rqcc-94gv-wjm9
- https://github.com/sipcapture/homer/commit/5e90809657c9df321db191a69c6050f873f5646b
- https://github.com/sipcapture/homer/pull/839
- https://github.com/sipcapture/homer/releases/tag/11.0.283
CVE-2026-62253 · published · modified · JSON