https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T10:24:50.249902+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-329048 EUVD-2026-329048 2026-10-10T10:24:50.281490+00:00 EUVD-2026-329048 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56325 fkie_cve-2026-56325 2026-10-10T10:24:50.281536+00:00

Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain resolver, allowing underscore characters in app_id to act as SQL wildcards. Attackers can create apps with app_ids differing by one character at underscore positions to cause unintended pattern matches, breaking preview functionality for legitimate apps or causing app-id confusion.

 https://cve.radiocsirt.org/vuln/ghsa-pw45-xmrx-x2w8 GHSA-pw45-xmrx-x2w8 2026-10-10T10:24:50.281572+00:00

Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain resolver, allowing underscore characters in app_id to act as SQL wildcards. Attackers can create apps with app_ids differing by one character at underscore positions to cause unintended pattern matches, breaking preview functionality for legitimate apps or causing app-id confusion.