← All credits
Judel777
87 vulnerability records and advisories credit this contributor.
CVE-2026-56333
Capgo - Server-Side Validation Bypass via Direct Browser-Side Organization Security Settings Updates
CVE-2026-56327
Capgo - Unauthenticated Organization Existence Oracle via public.invite_user_to_org RPC
CVE-2026-56249
Capgo - Unauthorized Channel Overwrite and Ownership Takeover via POST /channel Name Collision
CVE-2026-56318
Capgo - Information Disclosure via /private/validate_password_compliance Endpoint
CVE-2026-56334
Capgo - Missing UPDATE RLS Policy for Build Status Persistence
CVE-2026-56224
Capgo - Login CSRF and Session Fixation via URL Query Parameters
CVE-2026-56231
Capgo - Broken Object Level Authorization in Build Job Control via jobId Parameter
CVE-2026-56257
Capgo - Authorization Bypass in App Ownership Transfer via Direct PostgREST Update
CVE-2026-56310
Cap-go - Authorization Bypass in Organization Members Endpoint via API Key Scope Bypass
CVE-2026-56215
Capgo - Account Merge via Poisoned public.users.email in SSO Provisioning