{"action":"Upgrade github.com/sipcapture/homer-app to 0.0.0-20260625085520-a7d027dc684b or later.","affected":[{"introduced":"0"}],"component":"github.com/sipcapture/homer-app","cve_ids":["CVE-2026-62251"],"ecosystem":"Go","epss":0.00433,"exploited":false,"fixed_versions":["0.0.0-20260625085520-a7d027dc684b"],"ghsa_id":"GHSA-f46q-3v67-fmm4","id":"tcs_01M5JJQK7MGAN2HAWZ337Y0WC2","modified_at":"2026-10-20T00:56:06.107700572Z","published_at":"2026-10-07T16:13:08Z","references":["https://osv.dev/vulnerability/GHSA-f46q-3v67-fmm4","https://github.com/sipcapture/homer/security/advisories/GHSA-f46q-3v67-fmm4","https://github.com/sipcapture/homer/pull/837","https://github.com/sipcapture/homer/commit/a7d027dc684b210b62285c49f555ac88d64f35f0","https://github.com/sipcapture/homer","https://github.com/sipcapture/homer/releases/tag/11.0.283"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-f46q-3v67-fmm4","url":"https://osv.dev/vulnerability/GHSA-f46q-3v67-fmm4"}],"summary":"Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query"}