Login Request a demo
CA
Product
capgo
by Cap-go · last CVE Jul 15, 2026
17
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 2High 6Medium 9Low 0
Severity
All severities17Critical2High6Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add capgo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-56245
8.2
0%
Jun 24
Supabase Capgo - Unauthenticated Cross-Tenant Build-Time Accounting Poisoning via record_build_time RPC
Affected: before 12.128.2
CVE-2026-56339
7.5
0%
Jul 15
Capgo - Unauthenticated Organization Existence Enumeration via rescind_invitation RPC
Affected: before 12.128.2
CVE-2026-56226
7.5
0%
Jul 8
Capgo - Unauthenticated Organization Data Disclosure via get_orgs_v6 RPC
Affected: before 12.128.2
CVE-2026-56248
7.5
0%
Jun 23
Capgo - Unauthenticated Denial-of-Service via audit_logs RLS Policy
Affected: before 12.128.12
CVE-2026-56082
7.5
0%
Jun 19
Capgo - Unauthenticated Cross-Tenant Billing Log Tampering via public.record_build_time RPC
Affected: before 12.128.2
CVE-2026-56280
7.1
0%
Jun 22
Cap-go - Privilege Inversion in Build Log Stream via SSE Disconnect
Affected: before 12.128.2
Showing 6