Threats tagged 'ghsa-pj32-crq8-r292'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.4%	CVE-2026-56312Capgo before 12.128.2 contains an improper validation vulnerability in the accept_invitation endpoint that creates user accounts before captcha validation is enforced Medium6.5EPSS 0.4%2026-07-10GCVE DatabaseCVE-2026-56312 Capgo before 12.128.2 contains an improper validation vulnerability in the accept_invitation endpoint that creates user accounts before captcha validation is enforced. Attackers can bypass captcha protection by sending POST requests with invalid captcha tokens to create unwanted accounts and burn invite links. EPSS 0.4%Vulnerability CWE-287 #ghsa-pj32-crq8-r292	GCVE Database	2026-07-10

Page 1 of 1