Go/github.com/sipcapture/homer-app CVE-2026-62253: critical 9.8

Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)

Action: Upgrade github.com/sipcapture/homer-app to 0.0.0-20260625093330-5e90809657c9 or later.

go get github.com/sipcapture/homer-app@v0.0.0-20260625093330-5e90809657c9

Affected

Fixed versions

Sources

• osv: GHSA-rqcc-94gv-wjm9
• https://github.com/sipcapture/homer/security/advisories/GHSA-rqcc-94gv-wjm9
• https://github.com/sipcapture/homer/pull/839
• https://github.com/sipcapture/homer/commit/5e90809657c9df321db191a69c6050f873f5646b
• https://github.com/sipcapture/homer
• https://github.com/sipcapture/homer/releases/tag/11.0.283

CVE-2026-62253 · published 2026-10-07T16:11:58Z · modified 2026-10-20T00:55:52.571323559Z · JSON