Go/github.com/sipcapture/homer-app CVE-2026-62251: high 8.1, EPSS 0.43%

Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query

Action: Upgrade github.com/sipcapture/homer-app to 0.0.0-20260625085520-a7d027dc684b or later.

go get github.com/sipcapture/homer-app@v0.0.0-20260625085520-a7d027dc684b

Affected

Fixed versions

Sources

• osv: GHSA-f46q-3v67-fmm4
• https://github.com/sipcapture/homer/security/advisories/GHSA-f46q-3v67-fmm4
• https://github.com/sipcapture/homer/pull/837
• https://github.com/sipcapture/homer/commit/a7d027dc684b210b62285c49f555ac88d64f35f0
• https://github.com/sipcapture/homer
• https://github.com/sipcapture/homer/releases/tag/11.0.283

CVE-2026-62251 · published 2026-10-07T16:13:08Z · modified 2026-10-20T00:56:06.107700572Z · JSON