Advisories · Technology
Cap-go capgo.app.
Every CVE that names Cap-go capgo.app among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
capgo through 12.128.2 IDOR via PUT /app icon endpoint
- Cap-go capgo.app
- Broken access control
- CVSS 7.0 High
Capgo backend before 12.127.5 Privilege Escalation via role_bindings PATCH
- Cap-go capgo.app
- Broken access control
- CVSS 8.7 High
capgo.app before 12.128.12 Authentication Bypass via apikey
- Cap-go capgo.app
- Broken access control
- CVSS 7.2 High
Capgo bundle promotion API channel RBAC deny override bypass
- Cap-go capgo.app
- Broken access control
- CVSS 8.7 High
Capgo Build Upload Proxy Authorization Bypass via TUS Resource
- Cap-go capgo.app
- CWE-441
- CVSS 5.3 Medium
Capgo.app before 12.264.5 Upload Expiry Bypass via build upload
- Cap-go capgo.app
- Authentication bypass
- CVSS 8.7 High
Capgo Authentication Bypass via Direct PostgREST org_users Table Write
- Cap-go capgo.app
- Broken access control
- CVSS 8.7 High
capgo.app through 12.129.0 Cache Restoration of Deleted Bundles
- Cap-go capgo.app
- Information disclosure
- CVSS 5.3 Medium
capgo.app Content-Lock Bypass via r2-direct Bundle Mutation
- Cap-go capgo.app
- Broken access control
- CVSS 8.7 High
Capgo OTA Manifest Poisoning via app_versions.manifest Bypass
- Cap-go capgo.app
- Privilege escalation
- CVSS 8.7 High
Capgo App Icon Update Privilege Escalation via Service-Role Worker
- Cap-go capgo.app
- Broken access control
- CVSS 8.7 High
Cap-go capgo.app Authorization Bypass via channel_permission_overrides
- Cap-go capgo.app
- Broken access control
- CVSS 7.0 High
capgo.app Authentication Bypass via PostgREST customer_id Mutation
- Cap-go capgo.app
- Broken access control
- CVSS 8.7 High
Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation
- Cap-go capgo.app
- Privilege escalation
- CVSS 8.7 High
Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata Worker
- Cap-go capgo.app
- Broken access control
- CVSS 6.0 Medium
capgo.app Authorization Bypass via Stale Channel Permission Overrides
- Cap-go capgo.app
- Broken access control
- CVSS 8.6 High
Capgo SSO Provider ID Authentication Bypass via Incomplete Migration
- Cap-go capgo.app
- Broken access control
- CVSS 7.1 High
Capgo apikey_manager Role Privilege Escalation via Incomplete Role Deny-list
- Cap-go capgo.app
- Privilege escalation
- CVSS 9.3 CriticalCritical · CVSS 9+
Capgo SSO Provider Authentication Bypass via PostgREST Direct Write
- Cap-go capgo.app
- Broken access control
- CVSS 8.6 High
capgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_org
- Cap-go capgo.app
- Privilege escalation
- CVSS 8.7 High
Capgo API Key Manager Authentication Bypass via x-limited-key-id
- Cap-go capgo.app
- Broken access control
- CVSS 8.7 High
Capgo AAL1 Session MFA Bypass via Direct RBAC Authorization
- Cap-go capgo.app
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
Capgo Authorization Bypass via Stale Channel Permission Overrides
- Cap-go capgo.app
- Broken access control