Login Request a demo
CA
Product
capgo
by Cap-go · last CVE Jul 15, 2026
17
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 2High 6Medium 9Low 0
Severity
All severities17Critical2High6Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add capgo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-56221
6.5
0%
Jun 22
Cap-go - SQL Injection in Cloudflare Analytics Engine Queries via cloudflare.ts
Affected: before 12.128.2
CVE-2026-53982
6.5
0%
Jun 12
Cap-go Console < 12.28.2 Account Deletion DoS via Device Identifier Association
Affected: before 12.28.2
CVE-2026-56296
5.3
0%
Jul 11
Cap-go - App Existence Oracle via Unauthenticated transfer_app RPC
Affected: before 12.128.2
CVE-2026-56284
5.3
0%
Jul 8
Capgo - Unauthenticated Metrics Disclosure via get_total_metrics RPC
Affected: before 12.128.2
CVE-2026-56316
5.3
0%
Jun 21
Cap-go - Job Existence Oracle via Unauthenticated OPTIONS /build/upload/:jobId/*
Affected: before 12.128.2
CVE-2026-56235
5.3
0%
Jun 20
Capgo - Unauthenticated Cross-Tenant Metrics Disclosure via RPC Functions
Affected: before 12.128.2
CVE-2026-56080
4.9
0%
Jun 19
Cap-go - Authentication Logic Flaw in Enforce Password Policy
Affected: before 12.128.2
CVE-2026-56310
4.3
0%
Jun 24
Cap-go - Authorization Bypass in Organization Members Endpoint via API Key Scope Bypass
Affected: before 12.128.2
CVE-2026-56307
4.3
0%
Jun 20
Cap-go - Broken Cursor Pagination in /private/devices Endpoint
Affected: before 12.128.12
Showing 9