Cap vulnerabilities

CVEs whose affected-version data names the Cap package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-59704High· 7.1PoC

2mo ago

Cap - Missing Access Control in Video AI Metadata Endpoint

Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated attackers can supply arbitrary video IDs to read sensitiv…

▾ MidnightCap · CapEPSS 0.37%via CVEORG