capacitor-flaw-cve-2026-103922

Capacitor Mobile Framework Flaw CVE-2026-103922 A high-severity security flaw, tracked as CVE-2026-103922, has been identified in Capacitor, the popular cross-platform mobile application framework by Ionic. This vulnerability exposes the native bridge mechanism, potentially allowing malicious web...

@cotecna/stencil-components (>=3.3.1, <=4.0.0), @happyknuckles/angular-standalone-clean-code (0.0.2) +3 more potentially affected by CVE-2026-103922 via @capacitor/android (>=7.0.1, <=7.4.4)

@capacitor/android NPM version =7.0.1, =3.3.1, =0.0.24, =1.0.1, =0.0.1, =0.0.2 Source cves: CVE-2026-103922 Source advisory: GHSA-RVM3-566M-V7FV...

GHSA-RVM3-566M-V7FV Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Impact Capacitor's WebView navigation guard validated only the host and scheme of a target URL, not its path. Because the internal HTTP proxy path /capacitorhttpinterceptor is served at the application's own origin, a frame navigation to it was always treated as in-app navigation and allowed...

@cotecna/stencil-components (>=3.3.1, <=4.0.0), @happyknuckles/angular-standalone-clean-code (0.0.2) +3 more potentially affected by CVE-2026-103922 via @capacitor/android (>=7.0.1, <=7.4.4)

@capacitor/android NPM version =7.0.1, =3.3.1, =0.0.24, =1.0.1, =0.0.1, =0.0.2 Source cves: CVE-2026-103922 Source advisory: OSV:GHSA-RVM3-566M-V7FV...

meta-g (>=1.0.0, <=1.0.494998), metag-sdk-ionic (>=1.0.0, <=1.1.6) potentially affected by CVE-2026-103922 via @capacitor/ios (6.1.2)

@capacitor/ios NPM version 6.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @capacitor/ios and may be impacted: - meta-g =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: GHSA-RVM3-566M-V7FV...

@tak-ps/cloudtak (>=12.134.0, <=12.138.1), @vnejs/bundles.canvas.react (>=0.1.1, <=0.2.0) +8 more potentially affected by CVE-2026-103922 via @capacitor/ios (>=8.0.2, <=8.3.1)

@capacitor/ios NPM version =8.0.2, =12.134.0, =0.1.1, =0.2.1, =0.1.0, =0.1.36, =0.1.2, =0.1.1, =0.1.1, =0.1.1, =0.2.20, =0.2.31 Source cves: CVE-2026-103922 Source advisory: GHSA-RVM3-566M-V7FV...

@cotecna/stencil-components (>=3.3.1, <=4.0.0), @happyknuckles/angular-standalone-clean-code (0.0.2) +2 more potentially affected by CVE-2026-103922 via @capacitor/ios (>=7.0.1, <=7.4.4)

@capacitor/ios NPM version =7.0.1, =3.3.1, =0.0.24, =1.0.1, =1.8.0 Source cves: CVE-2026-103922 Source advisory: GHSA-RVM3-566M-V7FV...

@sumaris-net/ngx-components (18.5.0-alpha2), meta-g (>=1.0.0, <=1.0.494998) +1 more potentially affected by CVE-2026-103922 via @capacitor/android (>=6.1.2, <=6.2.0)

@capacitor/android NPM version =6.1.2, =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: OSV:GHSA-RVM3-566M-V7FV...

@vnejs/bundles.canvas.react (>=0.1.1, <=0.2.0), @vnejs/bundles.checkers (>=0.2.1, <=0.2.3) +7 more potentially affected by CVE-2026-103922 via @capacitor/android (8.0.2)

@capacitor/android NPM version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @capacitor/android and may be impacted: - @vnejs/bundles.canvas.react =0.1.1, =0.2.1, =0.1.0, =0.1.36, =0.1.2, =0.1.1, =0.1.1, =0.1.1, =0.2.20, =0.2.31 Source cves:...

meta-g (>=1.0.0, <=1.0.494998), metag-sdk-ionic (>=1.0.0, <=1.1.6) potentially affected by CVE-2026-103922 via @capacitor/ios (6.1.2)

@capacitor/ios NPM version 6.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @capacitor/ios and may be impacted: - meta-g =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: OSV:GHSA-RVM3-566M-V7FV...

@sumaris-net/ngx-components (18.5.0-alpha2), meta-g (>=1.0.0, <=1.0.494998) +1 more potentially affected by CVE-2026-103922 via @capacitor/android (>=6.1.2, <=6.2.0)

@capacitor/android NPM version =6.1.2, =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: GHSA-RVM3-566M-V7FV...

@cotecna/stencil-components (>=3.3.1, <=4.0.0), @happyknuckles/angular-standalone-clean-code (0.0.2) +2 more potentially affected by CVE-2026-103922 via @capacitor/ios (>=7.0.1, <=7.4.4)

@capacitor/ios NPM version =7.0.1, =3.3.1, =0.0.24, =1.0.1, =1.8.0 Source cves: CVE-2026-103922 Source advisory: OSV:GHSA-RVM3-566M-V7FV...

@tak-ps/cloudtak (>=12.134.0, <=12.138.1), @vnejs/bundles.canvas.react (>=0.1.1, <=0.2.0) +8 more potentially affected by CVE-2026-103922 via @capacitor/ios (>=8.0.2, <=8.3.1)

@capacitor/ios NPM version =8.0.2, =12.134.0, =0.1.1, =0.2.1, =0.1.0, =0.1.36, =0.1.2, =0.1.1, =0.1.1, =0.1.1, =0.2.20, =0.2.31 Source cves: CVE-2026-103922 Source advisory: OSV:GHSA-RVM3-566M-V7FV...

@vnejs/bundles.canvas.react (>=0.1.1, <=0.2.0), @vnejs/bundles.checkers (>=0.2.1, <=0.2.3) +7 more potentially affected by CVE-2026-103922 via @capacitor/android (8.0.2)

@capacitor/android NPM version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @capacitor/android and may be impacted: - @vnejs/bundles.canvas.react =0.1.1, =0.2.1, =0.1.0, =0.1.36, =0.1.2, =0.1.1, =0.1.1, =0.1.1, =0.2.20, =0.2.31 Source cves:...

EUVD-2026-90973

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path...

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Impact Capacitor's WebView navigation guard validated only the host and scheme of a target URL, not its path. Because the internal HTTP proxy path /capacitorhttpinterceptor is served at the application's own origin, a frame navigation to it was always treated as in-app navigation and allowed...

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Capacitor's WebView navigation guard validated only the host and scheme of a target URL, not its path. Because the internal HTTP proxy path /capacitorhttpinterceptor is served at the application's own origin, a frame navigation to it was always treated as in-app navigation and allowed. Loading th...

CVE-2026-103922

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

CVE-2026-103922

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

CVE-2026-103922 Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...