CVE Intelligence

Pommee vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Pommee products: 1 record(s), with severity, exploitation and fixes.

Goaway 1

Exploited only (KEV) →

CVE-2025-65730 High · 8.8 CWE-798 Dec 5, 2025
Use of Hard-coded Credentials in Pommee Goaway
Authentication Bypass via Hardcoded Credentials GoAway up to v0.62.18, fixed in 0.62.19, uses a hardcoded secret for signing JWT tokens used for authentication.