Judel777

Capgo CLI - Arbitrary File Overwrite via Symlink-Following in Local Credential Operations

Capgo - Unauthenticated Cross-Tenant Metrics Disclosure via RPC Functions

Capgo - Cross-App Build Job Access via app_id/job_id Mismatch in /build/status and /build/logs

Capgo - Server-Side Request Forgery via Webhook URL Validation

Capgo - Scope Escalation via API Key Creation in /functions/v1/apikey

Capgo - Account Merge via Poisoned public.users.email in SSO Provisioning

Capgo - Unauthenticated Organization Enumeration and Billing Status Disclosure via Supabase RPC

Capgo - Unauthenticated Cross-Tenant Metrics Poisoning via upsert_version_meta RPC

Capgo - Unauthenticated Cross-Tenant Billing Log Tampering via public.record_build_time RPC

Capgo - Cross-Tenant Authorization Bypass via PostgREST Webhook Access