← Back

Goaway

goaway

Vendor: Pommee • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-65730
1Pommee
1Goaway
Jun 17, 2026
Dec 5, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Authentication Bypass via Hardcoded Credentials GoAway up to v0.62.18, fixed in 0.62.19, uses a hardcoded secret for signing JWT tokens used for authentication.