← Back

Pommee

pommee

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Goaway
goaway

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Pommee
1Goaway
Jun 17, 2026
Dec 5, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Authentication Bypass via Hardcoded Credentials GoAway up to v0.62.18, fixed in 0.62.19, uses a hardcoded secret for signing JWT tokens used for authentication.