CVE-2026-62251

Go/github.com/sipcapture/homer-app CVE-2026-62251: high 8.1

Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query

Action: Upgrade github.com/sipcapture/homer-app to 0.0.0-20260625085520-a7d027dc684b or later.

go get github.com/sipcapture/homer-app@v0.0.0-20260625085520-a7d027dc684b

Affected

Fixed versions

Sources

• osv: GHSA-f46q-3v67-fmm4
• https://github.com/sipcapture/homer/security/advisories/GHSA-f46q-3v67-fmm4
• https://github.com/sipcapture/homer/pull/837
• https://github.com/sipcapture/homer/commit/a7d027dc684b210b62285c49f555ac88d64f35f0
• https://github.com/sipcapture/homer
• https://github.com/sipcapture/homer/releases/tag/11.0.283

CVE-2026-62251 · published 2026-10-07T16:13:08Z · modified 2026-10-20T00:56:06.107700572Z · JSON

Go/github.com/sipcapture/homer-app CVE-2026-62251: high 8.1

Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query in github.com/sipcapture/homer-app

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-6672
• nvd: CVE-2026-62251
• https://github.com/sipcapture/homer/security/advisories/GHSA-f46q-3v67-fmm4
• https://github.com/sipcapture/homer/commit/a7d027dc684b210b62285c49f555ac88d64f35f0
• https://github.com/sipcapture/homer/pull/837
• https://github.com/sipcapture/homer/releases/tag/11.0.283

CVE-2026-62251 · published 2026-10-20T00:20:56Z · modified 2026-10-20T00:45:10.130885127Z · JSON