Judel777

Capgo - Stale Cross-Organization Authorization via Incomplete deploy_history Update in transfer_app()

Capgo - Encrypted Bundle Policy Bypass via Direct PostgREST Update

Capgo - Arbitrary R2 Object Deletion via Mutable r2_path in app_versions

Capgo - Org/App Scope Mismatch in Device Creation Endpoint

Capgo - Unauthenticated RBAC Bindings and Email Disclosure via get_org_user_access_rbac NULL-auth Bypass

Capgo - Improper Error Handling in Accept Invitation Endpoint via Invalid Magic String

Capgo - Broken Object Level Authorization via x-limited-key-id Header

Capgo - Integrity Issue in Release Routing via Multiple Public Channels

Capgo - Privilege Escalation via Cross-Scope RBAC Role Assignment

Capgo - Unauthenticated API Key Validity and Permission Oracle via RPC Functions