Skip to content

Product

capsoftware/cap vulnerabilities

2 published CVES affecting capsoftware/cap, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest capsoftware/cap CVEs

Newest publication first

  1. CVE-2026-69113 Cap v0.3.1 Broken Access Control via video comment endpoint

    Published
    MediumCVSS 5.3

    Cap v0.3.1 contains a broken access control vulnerability in the POST /api/video/comment endpoint that allows authenticated users to post comments on any private video without permission by supplying an arbitrary videoId in the request body. Attackers can inject comments into pri...

  2. CVE-2026-59704 Cap - Missing Access Control in Video AI Metadata Endpoint

    Published
    HighCVSS 7.1

    Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated attackers can supply arbitrary video IDs to read sensitive AI-generated content and trigger unauthor...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.