Threats tagged 'ghsa-r6v6-qvq3-q232'

1 threat

Threats tagged 'ghsa-r6v6-qvq3-q232'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-100624capgo.app · Insufficient Session Expiration Medium5.3EPSS 0.2%2026-09-26CVE Database V5CVE-2026-100624 Capgo.app versions before 12.264.5 have a vulnerability where the /build/upload/:jobId TUS proxy endpoint does not enforce upload expiry or build lifecycle state. Authenticated users with app.build_native permission can continue uploading to a build session after its expiry or after the build phase has ended. This issue is fixed in version 12.264.5. EPSS 0.2%Vulnerability Cap-go #ghsa-r6v6-qvq3-q232	CVE Database V5	2026-09-26

Showing 1–1 of 1 result