https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T20:34:22.987342+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331636 EUVD-2026-331636 2026-10-12T20:34:22.989456+00:00 EUVD-2026-331636 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56334 fkie_cve-2026-56334 2026-10-12T20:34:22.989485+00:00

Capgo before 12.128.2 lacks an UPDATE row-level security policy for the build_requests table, preventing API-key and anonymous access from persisting builder status updates. Attackers can exploit this missing policy to cause build status and error details to remain unpersisted, leaving build_requests rows stuck in pending state with null last_error values.

 https://cve.radiocsirt.org/vuln/ghsa-wx33-g984-7g82 GHSA-wx33-g984-7g82 2026-10-12T20:34:22.989515+00:00

Capgo before 12.128.2 lacks an UPDATE row-level security policy for the build_requests table, preventing API-key and anonymous access from persisting builder status updates. Attackers can exploit this missing policy to cause build status and error details to remain unpersisted, leaving build_requests rows stuck in pending state with null last_error values.