PT-2026-99289

Name of the Vulnerable Software and Affected Versions Capgo capgo.app affected versions not specified Description An authorization flaw exists in the app icon update process. The 'PUT /app/:id' endpoint accepts a user-controlled icon value and stores it in public.apps.icon url without verifying i...