sipcapture/homer Security Advisories | GitStock

high2026-10-07

Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query

GHSA-f46q-3v67-fmm4 · CVE-2026-62251

critical2026-10-07

Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login

GHSA-6xp5-7rcx-xfgx · CVE-2026-62252

critical2026-10-07

Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)

GHSA-rqcc-94gv-wjm9 · CVE-2026-62253