Pommee Goaway vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Pommee Goaway: 1 record(s), with affected versions and fixes.
cpe:2.3:a:pommee:goaway

CVE-2025-65730 High · 8.8 CWE-798 Dec 5, 2025

Use of Hard-coded Credentials in Pommee Goaway

Authentication Bypass via Hardcoded Credentials GoAway up to v0.62.18, fixed in 0.62.19, uses a hardcoded secret for signing JWT tokens used for authentication.