Vulnerabilities in capgo

83 results
Vexday analysis

Capgo possui apenas 1 CVE registrado na base, publicado recentemente (últimos 90 dias), relacionado a questões de link/path traversal (CWE-59), sem evidência de exploração ativa no cenário de ameaças. O risco atual é baixo, mas a recência da vulnerabilidade exige validação da aplicabilidade ao seu ambiente.

CVE-2026-56256HIGHCapgo - Two-Factor Authentication Bypass via Organization Management APIEPSS 0.2%CVE-2026-56329MEDIUMCapgo - Cross-Tenant Preview Namespace Collision via Non-Bijective Underscore DecodingEPSS 0.2%CVE-2026-56333MEDIUMCapgo - Server-Side Validation Bypass via Direct Browser-Side Organization Security Settings UpdatesEPSS 0.2%CVE-2026-56246HIGHCapgo - Cross-Organization Authorization Bypass via Scoped API Key Privilege InheritanceEPSS 0.2%CVE-2026-56320HIGHCapgo - Org/App Scope Mismatch in Device Creation EndpointEPSS 0.2%CVE-2026-56217MEDIUMCapgo - Encrypted Bundle Policy Bypass via Direct PostgREST UpdateEPSS 0.2%CVE-2026-56241HIGHCapgo - RBAC Demotion Privilege Retention via Stale org_users.user_rightEPSS 0.2%CVE-2026-56302MEDIUMCapgo - Unsecured Supabase Images Bucket via Missing Row Level SecurityEPSS 0.2%CVE-2026-56336MEDIUMCapgo - Information Disclosure via Unauthenticated SSO check-domain EndpointEPSS 0.2%CVE-2026-56220HIGHCapgo - Unauthorized Manifest Insertion via Read-Only Org MemberEPSS 0.2%CVE-2026-56281MEDIUMCapgo - SQL Injection via Unvalidated limit Parameter in Admin Stats EndpointEPSS 0.2%CVE-2026-56224MEDIUMCapgo - Login CSRF and Session Fixation via URL Query ParametersEPSS 0.2%CVE-2026-56244HIGHCapgo - Webhook Signing Secret Disclosure via Non-Admin API KeyEPSS 0.2%CVE-2026-56334MEDIUMCapgo - Missing UPDATE RLS Policy for Build Status PersistenceEPSS 0.2%CVE-2026-56298MEDIUMCapgo - EXIF Metadata Exposure in App Information Image UploadEPSS 0.2%CVE-2026-56236MEDIUMCapgo CLI - Arbitrary File Overwrite via Symlink-Following in Local Credential OperationsEPSS 0.2%CVE-2026-53867MEDIUMCapgo < 12.128.2 - Orphaned File Retention via Profile Image ReplacementEPSS 0.2%CVE-2026-56257HIGHCapgo - Authorization Bypass in App Ownership Transfer via Direct PostgREST UpdateEPSS 0.2%CVE-2026-56240MEDIUMCapgo - Billing Authorization Bypass via Exhausted Usage CreditsEPSS 0.2%CVE-2026-56231HIGHCapgo - Broken Object Level Authorization in Build Job Control via jobId ParameterEPSS 0.2%