Cap-go capgo vulnerabilities

Newest CVEs

• CVE-2026-56339

  Capgo - Unauthenticated Organization Existence Enumeration via rescind_invitation RPC

  Cap-go · capgo

  High8.7
• CVE-2026-56296

  Cap-go - App Existence Oracle via Unauthenticated transfer_app RPC

  Cap-go · capgo

  Medium6.9
• CVE-2026-56284

  Capgo - Unauthenticated Metrics Disclosure via get_total_metrics RPC

  Cap-go · capgo

  Medium6.9
• CVE-2026-56226

  Capgo - Unauthenticated Organization Data Disclosure via get_orgs_v6 RPC

  Cap-go · capgo

  High8.7
• CVE-2026-56310

  Cap-go - Authorization Bypass in Organization Members Endpoint via API Key Scope Bypass

  Cap-go · capgo

  Medium5.3
• CVE-2026-56245

  Supabase Capgo - Unauthenticated Cross-Tenant Build-Time Accounting Poisoning via record_build_time RPC

  Cap-go · capgo

  High8.8
• CVE-2026-56248

  Capgo - Unauthenticated Denial-of-Service via audit_logs RLS Policy

  Cap-go · capgo

  High8.7
• CVE-2026-56280

  Cap-go - Privilege Inversion in Build Log Stream via SSE Disconnect

  Cap-go · capgo

  High7.1
• CVE-2026-56221

  Cap-go - SQL Injection in Cloudflare Analytics Engine Queries via cloudflare.ts

  Cap-go · capgo

  High7.1
• CVE-2026-56316

  Cap-go - Job Existence Oracle via Unauthenticated OPTIONS /build/upload/:jobId/*

  Cap-go · capgo

  Medium6.9