Capgo.

Capgo - Information Disclosure via Unauthenticated SSO check-domain Endpoint

• Capgo
• Information disclosure

Capgo - Cross-Organization Account Disruption via SSO Prelink Endpoint

• Capgo
• Broken access control

Capgo - Insufficient Authentication in Email Change Endpoint

• Capgo
• CWE-640

Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats Endpoint

• Capgo
• SQL injection

Capgo - Scope Isolation Failure in Webhook Test Endpoint

• Capgo
• Broken access control

Capgo - RBAC Demotion Privilege Retention via Stale org_users.user_right

• Capgo
• Broken access control

Capgo - Unauthenticated Information Disclosure via PostgREST global_stats Endpoint

• Capgo
• Information disclosure

Capgo - Unauthenticated API Key Metadata Disclosure via SECURITY DEFINER RPC Function

• Capgo
• Information disclosure

Capgo - Billing Authorization Bypass via Exhausted Usage Credits

• Capgo
• Broken access control

Capgo - Channel Configuration Mutation via Write-Scoped API Keys

• Capgo
• Broken access control

Capgo - Cross-Tenant Preview Namespace Collision via Non-Bijective Underscore Decoding

• Capgo
• CWE-436

Capgo - Account Creation Before CAPTCHA Validation in accept_invitation Endpoint

• Capgo
• Authentication bypass

Capgo - Plan Bypass via Unrestricted Attachment Upload Endpoint

• Capgo
• Denial of service

Capgo - Authentication Bypass in Password Change via Missing Current Password Validation

• Capgo
• CWE-620

Capgo - Information Disclosure via get_orgs_v7 RPC Endpoint

• Capgo
• Broken access control

Capgo - EXIF Metadata Exposure in App Information Image Upload

• Capgo
• Information disclosure

Capgo - Stale Cross-Organization Authorization via Incomplete deploy_history Update in transfer_app()

• Capgo
• Broken access control

Capgo - HTML Injection Leading to Open Redirection in Organization Settings

• Capgo
• Cross-site scripting (XSS)

Capgo - Arbitrary R2 Object Deletion via Mutable r2_path in app_versions

• Capgo
• Broken access control

Capgo - Cross-Organization Authorization Bypass via Scoped API Key Privilege Inheritance

• Capgo
• Broken access control

Capgo - Unauthorized Manifest Insertion via Read-Only Org Member

• Capgo
• Broken access control

Capgo - Encrypted Bundle Policy Bypass via Direct PostgREST Update

• Capgo
• Broken access control

Capgo - Missing UPDATE RLS Policy for Build Status Persistence

• Capgo
• Broken access control

Capgo - Server-Side Validation Bypass via Direct Browser-Side Organization Security Settings Updates

• Capgo
• CWE-20

Capgo - Improper Error Handling in Accept Invitation Endpoint via Invalid Magic String

• Capgo
• Information disclosure

Capgo - Integrity Issue in Release Routing via Multiple Public Channels

• Capgo
• CWE-670

Capgo - Unauthenticated Organization Existence Oracle via public.invite_user_to_org RPC

• Capgo
• Information disclosure

Capgo - Org/App Scope Mismatch in Device Creation Endpoint

• Capgo
• Broken access control

Capgo - Information Disclosure via /private/validate_password_compliance Endpoint

• Capgo
• Information disclosure

Capgo - Unauthenticated API Key Validity and Permission Oracle via RPC Functions

• Capgo
• Information disclosure

Capgo - Account Deletion Without Password Confirmation

• Capgo
• Authentication bypass

Capgo - Unauthorized Channel Overwrite and Ownership Takeover via POST /channel Name Collision

• Capgo
• Broken access control

Capgo - Privilege Escalation via Cross-Scope RBAC Role Assignment

• Capgo
• Privilege escalation

Capgo - SSRF and Privilege Escalation via Path Traversal in Builder Upload Proxy

• Capgo
• Path traversal

Capgo - Broken Object Level Authorization via x-limited-key-id Header

• Capgo
• Broken access control

Capgo - Login CSRF and Session Fixation via URL Query Parameters

• Capgo
• Authentication bypass

Capgo - Unauthenticated RBAC Bindings and Email Disclosure via get_org_user_access_rbac NULL-auth Bypass

• Capgo
• Authentication bypass

Capgo - Denial of Service in 2FA Email Verification via /auth/v1/otp Endpoint

• Capgo
• CWE-703

Capgo - Information Disclosure via Unauthenticated RPC Function exist_app_v2

• Capgo
• Information disclosure

Capgo - Unsecured Supabase Images Bucket via Missing Row Level Security

• Capgo
• Broken access control

Capgo - Authorization Bypass in App Ownership Transfer via Direct PostgREST Update

• Capgo
• Broken access control

Capgo - Two-Factor Authentication Bypass via Organization Management API

• Capgo
• CWE-602

Capgo - Webhook Signing Secret Disclosure via Non-Admin API Key

• Capgo
• Information disclosure

Capgo - Unauthenticated API Key Generation via Client-Side Parameter Manipulation

• Capgo
• Authentication bypass

Capgo - Subkey Scope Bypass in middlewareKey via x-limited-key-id Header

• Capgo
• Broken access control

Capgo - Broken Object Level Authorization in Build Job Control via jobId Parameter

• Capgo
• Broken access control

Capgo - Account Takeover via Cross-Domain SSO Email Assertion in provision-user

• Capgo
• Authentication bypass

Capgo - Information Disclosure via Unauthenticated /updates defaultChannel Parameter

• Capgo
• Information disclosure

Capgo - Hashed API Key Enforcement Bypass via PostgREST/RLS Plane

• Capgo
• Authentication bypass

Capgo - Password Spraying via Public-Key Accessible Credential Validation Endpoint

• Capgo
• Authentication bypass

Capgo - Authorization Bypass in API Key Management via App-Limited Keys

• Capgo
• Privilege escalation

Capgo - Cross-Organization App Takeover via Mismatched org_id and app_id in /private/role_bindings

• Capgo
• Broken access control

Capgo - Rate Limit Bypass via User-Controlled device_id Parameter

• Capgo
• Denial of service

Capgo - Unauthenticated Channel Enumeration and App Oracle via GET /channel_self

• Capgo
• Information disclosure

Capgo - Missing Authentication Middleware on GET /private/role_bindings Endpoint

• Capgo
• Authentication bypass

Capgo - Deleted Bundle Selection via Missing Deletion Filter in /updates Endpoint

• Capgo
• CWE-672

Capgo - Unauthenticated Cross-Tenant Disclosure via get_current_plan_max_org RPC

• Capgo
• Broken access control

Capgo - Subkey Enforcement Bypass via x-limited-key-id Header Parsing

• Capgo
• CWE-20

Capgo - Denial of Service via Unlimited Demo App Creation

• Capgo
• Denial of service

Capgo - Denial of Service via Unauthenticated OPTIONS Request to /build/upload Endpoint

• Capgo
• Authentication bypass