Judel777

Capgo - Information Disclosure via Unauthenticated /updates defaultChannel Parameter

Capgo - Hashed API Key Enforcement Bypass via PostgREST/RLS Plane

Capgo - Deleted Bundle Selection via Missing Deletion Filter in /updates Endpoint

Capgo - Denial of Service via Unlimited Demo App Creation

Capgo - Denial of Service via Unauthenticated OPTIONS Request to /build/upload Endpoint

Capgo - Password Spraying via Public-Key Accessible Credential Validation Endpoint

Capgo - Missing Authentication Middleware on GET /private/role_bindings Endpoint

Capgo - Unauthenticated Denial-of-Service via audit_logs RLS Policy

Capgo - Authorization Bypass in API Key Management via App-Limited Keys

Capgo - Unauthenticated Cross-Tenant Disclosure via get_current_plan_max_org RPC