agentprime: capgo

agentprime: capgoEvery new CVE for capgo.https://agentprime.io/CVE-2026-56336: Capgo - Information Disclosure via Unauthenticated SSO check-domain Endpointhttps://agentprime.io/advisories/CVE-2026-56336/https://agentprime.io/advisories/CVE-2026-56336/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 12 Jul 2026 12:06:34 GMTCVECVE-2026-56313: Capgo - Cross-Organization Account Disruption via SSO Prelink Endpointhttps://agentprime.io/advisories/CVE-2026-56313/https://agentprime.io/advisories/CVE-2026-56313/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 12 Jul 2026 12:06:34 GMTCVECVE-2026-56308: Capgo - Insufficient Authentication in Email Change Endpointhttps://agentprime.io/advisories/CVE-2026-56308/https://agentprime.io/advisories/CVE-2026-56308/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 12 Jul 2026 12:06:33 GMTCVECVE-2026-56281: Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats Endpointhttps://agentprime.io/advisories/CVE-2026-56281/https://agentprime.io/advisories/CVE-2026-56281/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 12 Jul 2026 12:06:32 GMTCVECVE-2026-56252: Capgo - Scope Isolation Failure in Webhook Test Endpointhttps://agentprime.io/advisories/CVE-2026-56252/https://agentprime.io/advisories/CVE-2026-56252/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 12 Jul 2026 12:06:30 GMTCVECVE-2026-56241: Capgo - RBAC Demotion Privilege Retention via Stale org_users.user_righthttps://agentprime.io/advisories/CVE-2026-56241/https://agentprime.io/advisories/CVE-2026-56241/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 12 Jul 2026 12:06:29 GMTCVECVE-2026-56238: Capgo - Unauthenticated Information Disclosure via PostgREST global_stats Endpointhttps://agentprime.io/advisories/CVE-2026-56238/https://agentprime.io/advisories/CVE-2026-56238/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 12 Jul 2026 12:06:28 GMTCVECVE-2026-56303: Capgo - Unauthenticated API Key Metadata Disclosure via SECURITY DEFINER RPC Functionhttps://agentprime.io/advisories/CVE-2026-56303/https://agentprime.io/advisories/CVE-2026-56303/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jul 2026 13:00:57 GMTCVECVE-2026-56240: Capgo - Billing Authorization Bypass via Exhausted Usage Creditshttps://agentprime.io/advisories/CVE-2026-56240/https://agentprime.io/advisories/CVE-2026-56240/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jul 2026 13:00:56 GMTCVECVE-2026-56335: Capgo - Channel Configuration Mutation via Write-Scoped API Keyshttps://agentprime.io/advisories/CVE-2026-56335/https://agentprime.io/advisories/CVE-2026-56335/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 13:57:56 GMTCVECVE-2026-56329: Capgo - Cross-Tenant Preview Namespace Collision via Non-Bijective Underscore Decodinghttps://agentprime.io/advisories/CVE-2026-56329/https://agentprime.io/advisories/CVE-2026-56329/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 13:57:56 GMTCVECVE-2026-56312: Capgo - Account Creation Before CAPTCHA Validation in accept_invitation Endpointhttps://agentprime.io/advisories/CVE-2026-56312/https://agentprime.io/advisories/CVE-2026-56312/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 13:57:55 GMTCVECVE-2026-56309: Capgo - Plan Bypass via Unrestricted Attachment Upload Endpointhttps://agentprime.io/advisories/CVE-2026-56309/https://agentprime.io/advisories/CVE-2026-56309/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 13:57:54 GMTCVECVE-2026-56305: Capgo - Authentication Bypass in Password Change via Missing Current Password Validationhttps://agentprime.io/advisories/CVE-2026-56305/https://agentprime.io/advisories/CVE-2026-56305/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 13:57:54 GMTCVECVE-2026-56279: Capgo - Information Disclosure via get_orgs_v7 RPC Endpointhttps://agentprime.io/advisories/CVE-2026-56279/https://agentprime.io/advisories/CVE-2026-56279/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 13:57:53 GMTCVECVE-2026-56298: Capgo - EXIF Metadata Exposure in App Information Image Uploadhttps://agentprime.io/advisories/CVE-2026-56298/https://agentprime.io/advisories/CVE-2026-56298/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 13:49:02 GMTCVECVE-2026-56293: Capgo - Stale Cross-Organization Authorization via Incomplete deploy_history Update in transfer_app()https://agentprime.io/advisories/CVE-2026-56293/https://agentprime.io/advisories/CVE-2026-56293/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 13:49:00 GMTCVECVE-2026-56283: Capgo - HTML Injection Leading to Open Redirection in Organization Settingshttps://agentprime.io/advisories/CVE-2026-56283/https://agentprime.io/advisories/CVE-2026-56283/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 13:48:59 GMTCVECVE-2026-56250: Capgo - Arbitrary R2 Object Deletion via Mutable r2_path in app_versionshttps://agentprime.io/advisories/CVE-2026-56250/https://agentprime.io/advisories/CVE-2026-56250/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 13:48:57 GMTCVECVE-2026-56246: Capgo - Cross-Organization Authorization Bypass via Scoped API Key Privilege Inheritancehttps://agentprime.io/advisories/CVE-2026-56246/https://agentprime.io/advisories/CVE-2026-56246/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 13:48:57 GMTCVECVE-2026-56220: Capgo - Unauthorized Manifest Insertion via Read-Only Org Memberhttps://agentprime.io/advisories/CVE-2026-56220/https://agentprime.io/advisories/CVE-2026-56220/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 13:48:55 GMTCVECVE-2026-56217: Capgo - Encrypted Bundle Policy Bypass via Direct PostgREST Updatehttps://agentprime.io/advisories/CVE-2026-56217/https://agentprime.io/advisories/CVE-2026-56217/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 13:48:54 GMTCVECVE-2026-56334: Capgo - Missing UPDATE RLS Policy for Build Status Persistencehttps://agentprime.io/advisories/CVE-2026-56334/https://agentprime.io/advisories/CVE-2026-56334/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:34 GMTCVECVE-2026-56333: Capgo - Server-Side Validation Bypass via Direct Browser-Side Organization Security Settings Updateshttps://agentprime.io/advisories/CVE-2026-56333/https://agentprime.io/advisories/CVE-2026-56333/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:33 GMTCVECVE-2026-56331: Capgo - Improper Error Handling in Accept Invitation Endpoint via Invalid Magic Stringhttps://agentprime.io/advisories/CVE-2026-56331/https://agentprime.io/advisories/CVE-2026-56331/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:32 GMTCVECVE-2026-56328: Capgo - Integrity Issue in Release Routing via Multiple Public Channelshttps://agentprime.io/advisories/CVE-2026-56328/https://agentprime.io/advisories/CVE-2026-56328/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:32 GMTCVECVE-2026-56327: Capgo - Unauthenticated Organization Existence Oracle via public.invite_user_to_org RPChttps://agentprime.io/advisories/CVE-2026-56327/https://agentprime.io/advisories/CVE-2026-56327/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:31 GMTCVECVE-2026-56320: Capgo - Org/App Scope Mismatch in Device Creation Endpointhttps://agentprime.io/advisories/CVE-2026-56320/https://agentprime.io/advisories/CVE-2026-56320/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:30 GMTCVECVE-2026-56318: Capgo - Information Disclosure via /private/validate_password_compliance Endpointhttps://agentprime.io/advisories/CVE-2026-56318/https://agentprime.io/advisories/CVE-2026-56318/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:29 GMTCVECVE-2026-56300: Capgo - Unauthenticated API Key Validity and Permission Oracle via RPC Functionshttps://agentprime.io/advisories/CVE-2026-56300/https://agentprime.io/advisories/CVE-2026-56300/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:29 GMTCVECVE-2026-56286: Capgo - Account Deletion Without Password Confirmationhttps://agentprime.io/advisories/CVE-2026-56286/https://agentprime.io/advisories/CVE-2026-56286/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:28 GMTCVECVE-2026-56249: Capgo - Unauthorized Channel Overwrite and Ownership Takeover via POST /channel Name Collisionhttps://agentprime.io/advisories/CVE-2026-56249/https://agentprime.io/advisories/CVE-2026-56249/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:25 GMTCVECVE-2026-56247: Capgo - Privilege Escalation via Cross-Scope RBAC Role Assignmenthttps://agentprime.io/advisories/CVE-2026-56247/https://agentprime.io/advisories/CVE-2026-56247/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:24 GMTCVECVE-2026-56233: Capgo - SSRF and Privilege Escalation via Path Traversal in Builder Upload Proxyhttps://agentprime.io/advisories/CVE-2026-56233/https://agentprime.io/advisories/CVE-2026-56233/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:24 GMTCVECVE-2026-56230: Capgo - Broken Object Level Authorization via x-limited-key-id Headerhttps://agentprime.io/advisories/CVE-2026-56230/https://agentprime.io/advisories/CVE-2026-56230/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:23 GMTCVECVE-2026-56224: Capgo - Login CSRF and Session Fixation via URL Query Parametershttps://agentprime.io/advisories/CVE-2026-56224/https://agentprime.io/advisories/CVE-2026-56224/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:22 GMTCVECVE-2026-56219: Capgo - Unauthenticated RBAC Bindings and Email Disclosure via get_org_user_access_rbac NULL-auth Bypasshttps://agentprime.io/advisories/CVE-2026-56219/https://agentprime.io/advisories/CVE-2026-56219/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:08:22 GMTCVECVE-2026-56338: Capgo - Denial of Service in 2FA Email Verification via /auth/v1/otp Endpointhttps://agentprime.io/advisories/CVE-2026-56338/https://agentprime.io/advisories/CVE-2026-56338/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 11:53:18 GMTCVECVE-2026-56337: Capgo - Information Disclosure via Unauthenticated RPC Function exist_app_v2https://agentprime.io/advisories/CVE-2026-56337/https://agentprime.io/advisories/CVE-2026-56337/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 11:53:17 GMTCVECVE-2026-56302: Capgo - Unsecured Supabase Images Bucket via Missing Row Level Securityhttps://agentprime.io/advisories/CVE-2026-56302/https://agentprime.io/advisories/CVE-2026-56302/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 11:53:16 GMTCVECVE-2026-56257: Capgo - Authorization Bypass in App Ownership Transfer via Direct PostgREST Updatehttps://agentprime.io/advisories/CVE-2026-56257/https://agentprime.io/advisories/CVE-2026-56257/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 11:53:12 GMTCVECVE-2026-56256: Capgo - Two-Factor Authentication Bypass via Organization Management APIhttps://agentprime.io/advisories/CVE-2026-56256/https://agentprime.io/advisories/CVE-2026-56256/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 11:53:12 GMTCVECVE-2026-56244: Capgo - Webhook Signing Secret Disclosure via Non-Admin API Keyhttps://agentprime.io/advisories/CVE-2026-56244/https://agentprime.io/advisories/CVE-2026-56244/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 11:53:10 GMTCVECVE-2026-56237: Capgo - Unauthenticated API Key Generation via Client-Side Parameter Manipulationhttps://agentprime.io/advisories/CVE-2026-56237/https://agentprime.io/advisories/CVE-2026-56237/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 11:53:10 GMTCVEcriticalCVE-2026-56232: Capgo - Subkey Scope Bypass in middlewareKey via x-limited-key-id Headerhttps://agentprime.io/advisories/CVE-2026-56232/https://agentprime.io/advisories/CVE-2026-56232/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 11:53:09 GMTCVECVE-2026-56231: Capgo - Broken Object Level Authorization in Build Job Control via jobId Parameterhttps://agentprime.io/advisories/CVE-2026-56231/https://agentprime.io/advisories/CVE-2026-56231/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 11:53:08 GMTCVECVE-2026-56223: Capgo - Account Takeover via Cross-Domain SSO Email Assertion in provision-userhttps://agentprime.io/advisories/CVE-2026-56223/https://agentprime.io/advisories/CVE-2026-56223/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 11:53:08 GMTCVEcriticalCVE-2026-56322: Capgo - Information Disclosure via Unauthenticated /updates defaultChannel Parameterhttps://agentprime.io/advisories/CVE-2026-56322/https://agentprime.io/advisories/CVE-2026-56322/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 12:13:03 GMTCVECVE-2026-56243: Capgo - Hashed API Key Enforcement Bypass via PostgREST/RLS Planehttps://agentprime.io/advisories/CVE-2026-56243/https://agentprime.io/advisories/CVE-2026-56243/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 12:12:57 GMTCVECVE-2026-56234: Capgo - Password Spraying via Public-Key Accessible Credential Validation Endpointhttps://agentprime.io/advisories/CVE-2026-56234/https://agentprime.io/advisories/CVE-2026-56234/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 12:12:57 GMTCVE