capacitor-updater vulnerabilities

CVEs whose affected-version data names the capacitor-updater package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-56254High· 7.0

3mo ago

In @capgo/capacitor-updater (Cap-go/capgo) before 12.128.2, the end-to-end encryption scheme distributes the private key to each device that downloads the app

In @capgo/capacitor-updater (Cap-go/capgo) before 12.128.2, the end-to-end encryption scheme distributes the private key to each device that downloads the app. Because the public key can be derived from the private key, an attacker perfo…

▾ Twilightcapacitor-updater · capacitor-updaterEPSS 0.19%via NVD