Vulnerabilities in Cap-go
14 resultsCVE-2026-56248HIGHCapgo - Unauthenticated Denial-of-Service via audit_logs RLS PolicyEPSS 0.4%CVE-2026-56081CRITICALCap-go - Account Lockout via 2FA Misconfiguration on Unverified EmailEPSS 0.4%CVE-2026-53982HIGHCap-go Console < 12.28.2 Account Deletion DoS via Device Identifier AssociationEPSS 0.3%CVE-2026-56080MEDIUMCap-go - Authentication Logic Flaw in Enforce Password PolicyEPSS 0.3%CVE-2026-56221HIGHCap-go - SQL Injection in Cloudflare Analytics Engine Queries via cloudflare.tsEPSS 0.3%CVE-2026-56235MEDIUMCapgo - Unauthenticated Cross-Tenant Metrics Disclosure via RPC FunctionsEPSS 0.3%CVE-2026-56245HIGHSupabase Capgo - Unauthenticated Cross-Tenant Build-Time Accounting Poisoning via record_build_time RPCEPSS 0.3%CVE-2026-53981HIGHCap-go < v12.128.2 Account Takeover via Unauthenticated Email Change MechanismEPSS 0.3%CVE-2026-56280HIGHCap-go - Privilege Inversion in Build Log Stream via SSE DisconnectEPSS 0.3%CVE-2026-56082HIGHCapgo - Unauthenticated Cross-Tenant Billing Log Tampering via public.record_build_time RPCEPSS 0.2%CVE-2026-56316MEDIUMCap-go - Job Existence Oracle via Unauthenticated OPTIONS /build/upload/:jobId/*EPSS 0.2%CVE-2026-56307MEDIUMCap-go - Broken Cursor Pagination in /private/devices EndpointEPSS 0.2%CVE-2026-56073CRITICALCap-go - OTP Bypass via Response Manipulation in Email VerificationEPSS 0.2%CVE-2026-56310MEDIUMCap-go - Authorization Bypass in Organization Members Endpoint via API Key Scope BypassEPSS 0.2%