Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/sipcapture/homer-app

3 known vulnerabilities (2 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 critical, 1 high
Registry
pkg.go.dev

Advisories 3

  • CVE-2026-62252Critical 9.8

    Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login

    Affected: fixed in 0.0.0-20260625091610-b2e942031ff8; all versions.

  • CVE-2026-62253Critical 9.8

    Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)

    Affected: fixed in 0.0.0-20260625093330-5e90809657c9; all versions.

  • Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query

    Affected: fixed in 0.0.0-20260625085520-a7d027dc684b; all versions.