Known Vulnerabilities for @capgo/cli by Cap-go
Listed below are 10 of the newest known vulnerabilities associated with "@capgo/cli" by "Cap-go".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100629 json | Capgo (capgo.app backend) before 12.127.5 contains an authorization flaw in the PATCH /private/role_bindings/:binding_id endp... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100628 json | capgo.app before 12.128.12 fails to enforce an organization's API key expiration policy when creating app-scoped API keys. In... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100627 json | Capgo (Cap-go/capgo.app) server backend Supabase functions contain an incorrect authorization flaw in the API-key bundle prom... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100626 json | capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accept... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100625 json | Capgo (capgo.app) exposes a native build TUS upload proxy (supabase/functions/_backend/public/build/upload.ts) that authorize... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100624 json | Capgo.app before 12.264.5 does not enforce upload expiry or build lifecycle state in the /build/upload/:jobId TUS proxy endpo... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100623 json | Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase PostgREST. The table's row-l... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100622 json | capgo.app through 12.129.0 fails to verify deletion status when serving cached bundle artifacts from the public file read end... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100621 json | Capgo (capgo.app) contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch is av... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100620 json | Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service account in its Android onboardi... | Not Provided | 2026-09-26 | 2026-09-26 |