CVE-2026-56330 | Capgo up to 12.128.1 callbackUrl/successUrl/cancelUrl redirect (GHSA-grc7-98pf-h8hq)

A vulnerability classified as problematic was found in Capgo up to 12.128.1. The affected element is an unknown function. Such manipulation of the argument callbackUrl/successUrl/cancelUrl leads to open redirect.

This vulnerability is traded as CVE-2026-56330. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.