VDB
Sign up

package

npm/@capgo/cli

pkg:npm/%40capgo/cli

HIGHnpm
GHSA-8mpm-q7mh-8fvh· CVE-2026-56236

Capgo CLI: symlink-following local secret writes enable arbitrary file overwrite + world-readable credentials (0600 missing)

Modified: 7/8/2026