Judel777

Capgo - Subkey Enforcement Bypass via x-limited-key-id Header Parsing

Capgo - Unauthenticated Organization Member Email Disclosure via get_org_members RPC

Capgo - Open Redirect via Unvalidated Stripe Billing URLs

Capgo - Information Disclosure via Unauthenticated /replication Endpoint

Capgo - Cross-Tenant Authorization Bypass via PostgREST Webhook Access

Capgo - Unauthenticated Organization Enumeration and Billing Status Disclosure via Supabase RPC

Capgo - Policy Enforcement Bypass in Webhook Management Endpoints via Non-Expiring API Keys

Capgo CLI - Arbitrary File Overwrite via Symlink-Following in Local Credential Operations

Capgo - Scope Escalation via API Key Creation in /functions/v1/apikey

Capgo - App ID Confusion via ILIKE Wildcard in Preview Subdomain Lookup