CVE-2025-65730

Published December 5th, 2025

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

N/A

Affected

PROJECTS

Description

Authentication Bypass via Hardcoded Credentials GoAway up to v0.62.18, fixed in 0.62.19, uses a hardcoded secret for signing JWT tokens used for authentication.

gian2dchris/CVEs

CVEs report

GitHub

pommee/goaway

Lightweight DNS sinkhole written in Go with a modern dashboard client

GitHub

710