Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /build/upload/:jobId/* endpoint that allows unauthenticated attackers to enumerate valid builder job IDs through observable response discrepancies. Attackers can probe the endpoint without authentication to distinguish valid job IDs from invalid ones and generate sustained unauthenticated traffic for resource consumption.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-56316 Information Disclosure in Cap-go Before 12.128.2 via Job ID Enumeration https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56316
Post summary
The post references CVE-2026-56316, indicating an information disclosure vulnerability in Cap-go before version 12.128.2 that allows job ID enumeration. No PoC, exploit, active exploitation, patch, or debunking is mentioned.