CapSoftware/Cap

CapSoftware/Cap

Releases189
Frequency4 days 12 hours
Last Release
Stars20.3K
Open source Loom alternative. Beautiful, shareable screen recordings.

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
7.1 HIGH

Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated attackers can supply arbitrary video IDs to read sensitive AI-generated content and trigger unauthorized AI generation that consumes the video owner's credits without consent.