Skip to content
Threat Feed
Subscribe

Product

Supabase PostgREST

1 brief RSS
high advisory

CVE-2026-56238 - Capgo Supabase PostgREST Information Disclosure

An information disclosure vulnerability (CVE-2026-56238) in Capgo before 12.128.2's Supabase PostgREST global_stats endpoint allows unauthenticated attackers to retrieve sensitive financial and operational metrics using a public API key.

Capgo < 12.128.2 +1 information-disclosure web-application vulnerability supabase
1r 2t 1c