CVE-2026-62253

Go/github.com/sipcapture/homer-app CVE-2026-62253: critical 9.8

Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)

Action: Upgrade github.com/sipcapture/homer-app to 0.0.0-20260625093330-5e90809657c9 or later.

go get github.com/sipcapture/homer-app@v0.0.0-20260625093330-5e90809657c9

Affected

Fixed versions

Sources

• osv: GHSA-rqcc-94gv-wjm9
• https://github.com/sipcapture/homer/security/advisories/GHSA-rqcc-94gv-wjm9
• https://github.com/sipcapture/homer/pull/839
• https://github.com/sipcapture/homer/commit/5e90809657c9df321db191a69c6050f873f5646b
• https://github.com/sipcapture/homer
• https://github.com/sipcapture/homer/releases/tag/11.0.283

CVE-2026-62253 · published 2026-10-07T16:11:58Z · modified 2026-10-20T00:55:52.571323559Z · JSON

Go/github.com/sipcapture/homer-app CVE-2026-62253: critical 9.8

Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default) in github.com/sipcapture/homer-app

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-6673
• nvd: CVE-2026-62253
• https://github.com/sipcapture/homer/security/advisories/GHSA-rqcc-94gv-wjm9
• https://github.com/sipcapture/homer/commit/5e90809657c9df321db191a69c6050f873f5646b
• https://github.com/sipcapture/homer/pull/839
• https://github.com/sipcapture/homer/releases/tag/11.0.283

CVE-2026-62253 · published 2026-10-20T00:20:56Z · modified 2026-10-20T00:45:10.116891294Z · JSON