Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Cap-go capgo (capgo-backend) before 12.128.12 contains an unauthenticated denial-of-service vulnerability arising from the audit_logs table's Row-Level Security (RLS) policy when accessed via the Supabase PostgREST API. Because the PostgreSQL query planner executes costly logic before RLS rejection, unfiltered queries to the public.audit_logs endpoint using the public anon key consistently trigger statement timeouts (PostgREST error 57014). Under concurrency, this exhausts database resources and causes cascading HTTP 500 failures on unrelated endpoints (e.g. /orgs), resulting in an application-layer denial of service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-56248 Unauthenticated Denial of Service in Cap-go via Audit Logs RLS Policy https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56248
Post summary
This text announces a new vulnerability (CVE-2026-56248) causing unauthenticated Denial of Service in Cap-go via Audit Logs RLS Policy, but provides no additional technical or mitigation details.