Psono Server permission and access control issue vulnerability

Versions 5.3.5 through 7.2.3 of Psono Server contain a vulnerability related to permission and access control. This issue arises because the permission class fails to enforce token write limits when claiming device code; as a result, authenticated remote attackers can exploit restricted API keys ...

PT-2026-51218

Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2 Description An authorization bypass exists in the '/build/status' and '/build/logs' endpoints. Attackers can access build jobs belonging to different applications by providing a mismatched app id and job id...