← All credits
Judel777
87 vulnerability records and advisories credit this contributor.
CVE-2026-56280
Cap-go - Privilege Inversion in Build Log Stream via SSE Disconnect
CVE-2026-56235
Capgo - Unauthenticated Cross-Tenant Metrics Disclosure via RPC Functions
CVE-2026-56316
Cap-go - Job Existence Oracle via Unauthenticated OPTIONS /build/upload/:jobId/*
CVE-2026-56245
Supabase Capgo - Unauthenticated Cross-Tenant Build-Time Accounting Poisoning via record_build_time RPC
CVE-2026-56338
Capgo - Denial of Service in 2FA Email Verification via /auth/v1/otp Endpoint
CVE-2026-56324
Capgo - Rate Limit Bypass via User-Controlled device_id Parameter
CVE-2026-56244
Capgo - Webhook Signing Secret Disclosure via Non-Admin API Key
CVE-2026-56337
Capgo - Information Disclosure via Unauthenticated RPC Function exist_app_v2
CVE-2026-56232
Capgo - Subkey Scope Bypass in middlewareKey via x-limited-key-id Header
CVE-2026-56323
Capgo - Unauthenticated Channel Enumeration and App Oracle via GET /channel_self