VYPR

@cap Go/core

by @cap Go

CVEs (1)

  • CVE-2026-56316Jun 21, 2026
    risk 0.00cvss epss

    Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /build/upload/:jobId/* endpoint that allows unauthenticated attackers to enumerate valid builder job IDs through observable response discrepancies. Attackers can probe the endpoint without…