CA
Product
capgo.app
23
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 13Medium 9Low 0
Watch
Add capgo.app to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-100611 | 6.5 | Sep 26 | Capgo apikey_manager Role Privilege Escalation via Incomplete Role Deny-list Affected: through 12.261.0 |
| CVE-2026-88860 | 6.3 | Sep 10 | Capgo Authorization Bypass via Stale Channel Permission Overrides Affected: 0 |
| CVE-2026-100629 | 5.5 | Sep 26 | Capgo backend before 12.127.5 Privilege Escalation via role_bindings PATCH Affected: before 12.127.5 |
| CVE-2026-100616 | 5.5 | Sep 26 | capgo.app Authentication Bypass via PostgREST customer_id Mutation Affected: 0 |
| CVE-2026-100624 | 5.4 | Sep 26 | Capgo.app before 12.264.5 Upload Expiry Bypass via build upload Affected: before 12.264.5 |
| CVE-2026-100613 | 5.3 | Sep 26 | capgo.app Authorization Bypass via Stale Channel Permission Overrides Affected: 0 |
| CVE-2026-100626 | 4.3 | Sep 26 | capgo through 12.128.2 IDOR via PUT /app icon endpoint Affected: through 12.128.2 |
| CVE-2026-100628 | 4.3 | Sep 26 | capgo.app before 12.128.12 Authentication Bypass via apikey Affected: before 12.128.12 |
| CVE-2026-100621 | 4.3 | Sep 26 | capgo.app Content-Lock Bypass via r2-direct Bundle Mutation Affected: 0 |
Showing 9