CVE-2026-56330 | Capgo up to 12.128.1 callbackUrl/successUrl/cancelUrl redirect (GHSA-grc7-98pf-h8hq / EUVD-2026-38126)

June 20, 2026 Yanac

A vulnerability classified as problematic was found in Capgo up to 12.128.1. The affected element is an unknown function. Such manipulation of the argument callbackUrl/successUrl/cancelUrl leads to open redirect.

This vulnerability is traded as CVE-2026-56330. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More