herowatch_go_server vulnerabilities

CVEs whose affected-version data names the herowatch_go_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121817High· 7.5

4d ago

About Time Technologies｜Herowatch Go Server - Insecure Direct Object Reference

Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify specific parameters to access or operate other users' data and functions.

▾ TwilightAbout Time Technologies · Herowatch Go ServerEPSS 0.44%via CVEORG