{"schema":"threatline.record/2","record":{"id":"CVE-2026-103922","aliases":["GHSA-rvm3-566m-v7fv"],"summary":"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path","details":"### Impact\n\nCapacitor's WebView navigation guard validated only the **host and scheme** of a\ntarget URL, not its **path**. Because the internal HTTP proxy path\n(`/_capacitor_http_interceptor_`) is served at the application's own origin, a\nframe navigation to it was always treated as in-app navigation and allowed.\n\nLoading that path as a document caused the native layer to fetch an arbitrary,\ncaller-specified URL and return the response body to the WebView **at the app's\nown origin**. Script in that response then ran with full same-origin trust:\naccess to `localStorage`, cookies, and every native capability the application\nexposes through its registered Capacitor plugins.\n\nThe proxy handler was additionally served **regardless of whether the\n`CapacitorHttp` plugin was enabled**, so applications that never enabled\n`CapacitorHttp` were also affected.\n\nExploitation requires a victim to activate a link inside the application's\nWebView. Any Capacitor application that renders user-controlled or unsanitized\nlinks (chat messages, comments, rich-text content) is a viable delivery surface.\n\nBoth **Android and iOS** are affected.\n\n### Patches\n\nTwo changes on each platform:\n\n1. The navigation guard now blocks frame navigations whose path is the internal\n   proxy path.\n2. The proxy handler is served only when `CapacitorHttp` is enabled, and never\n   for a document (main frame) request.\n\nLegitimate `CapacitorHttp` usage is unaffected. `fetch` and `XMLHttpRequest` are\nsubresource requests and do not pass through the navigation guard.\n\nUpgrade to a patched version, then rebuild and redistribute your application.\n\n### Workarounds\n\nIf you cannot upgrade immediately, note first that **disabling `CapacitorHttp`\nis not sufficient** on affected versions, because the proxy path is served\nregardless of that setting.\n\nRegistered plugins are consulted before the navigation guard runs, so a small\nplugin can block the path. On Android, override `shouldOverrideLoad(Uri url)` and\nreturn `true` when `url.getPath()` starts with `/_capacitor_http_interceptor_`.\nOn iOS, implement `shouldOverrideLoad(_:)` and return `true` for the same path.\nReturning `true` cancels the navigation; return `null`/`nil` for all other URLs\nso normal navigation is unchanged.\n\nIndependently, sanitize user-controlled link targets before rendering them in the\nWebView.","categories":["Libraries & packages"],"product":"@capacitor/android","vendor":"ionic-team","ecosystem":"npm","affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/android"},"range":">= 6.0.0, < 6.2.2"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/android"},"range":">= 7.0.0, < 7.6.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/ios"},"range":">= 6.0.0, < 6.2.2"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/ios"},"range":">= 7.0.0, < 7.6.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"swift","name":"github.com/ionic-team/capacitor-swift-pm"},"range":">= 6.0.0, < 6.2.2"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"swift","name":"github.com/ionic-team/capacitor-swift-pm"},"range":">= 7.0.0, < 7.6.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"com.capacitorjs:core"},"range":">= 6.0.0, < 6.2.2"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"com.capacitorjs:core"},"range":">= 7.0.0, < 7.6.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/android"},"range":">= 8.5.0, < 8.5.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/ios"},"range":">= 8.5.0, < 8.5.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"swift","name":"github.com/ionic-team/capacitor-swift-pm"},"range":">= 8.5.0, < 8.5.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"com.capacitorjs:core"},"range":">= 8.5.0, < 8.5.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"com.capacitorjs:core"},"range":">= 8.3.5, < 8.4.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/android"},"range":">= 8.3.5, < 8.4.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/ios"},"range":">= 8.3.5, < 8.4.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"swift","name":"github.com/ionic-team/capacitor-swift-pm"},"range":">= 8.3.5, < 8.4.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"swift","name":"github.com/ionic-team/capacitor-swift-pm"},"range":">= 8.0.0, <= 8.3.4"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"com.capacitorjs:core"},"range":">= 8.0.0, <= 8.3.4"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/android"},"range":">= 8.0.0, <= 8.3.4"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/ios"},"range":">= 8.0.0, <= 8.3.4"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103922","source_modified_at":"2026-10-01T18:01:54.381Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"capacitor","vendor":"ionic-team","versions":[{"status":"affected","version":">= 6.0.0, < 6.2.2"},{"status":"affected","version":">= 7.0.0, < 7.6.9"},{"status":"affected","version":">= 8.0.0, < 8.3.5"},{"status":"affected","version":">= 8.3.5, < 8.4.3"},{"status":"affected","version":">= 8.5.0, < 8.5.1"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103922","source_modified_at":"2026-10-01T18:01:54.381Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"android","vendor":"@capacitor","versions":[{"status":"affected","version":">= 8.5.0, < 8.5.1"},{"status":"affected","version":">= 8.3.5, < 8.4.3"},{"status":"affected","version":">= 8.0.0, < 8.3.5"},{"status":"affected","version":">= 7.0.0, < 7.6.9"},{"status":"affected","version":">= 6.0.0, < 6.2.2"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103922","source_modified_at":"2026-10-01T18:01:54.381Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"ios","vendor":"@capacitor","versions":[{"status":"affected","version":">= 8.5.0, < 8.5.1"},{"status":"affected","version":">= 8.3.5, < 8.4.3"},{"status":"affected","version":">= 8.0.0, < 8.3.5"},{"status":"affected","version":">= 7.0.0, < 7.6.9"},{"status":"affected","version":">= 6.0.0, < 6.2.2"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103922","source_modified_at":"2026-10-01T18:01:54.381Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"core","vendor":"com.capacitorjs","versions":[{"status":"affected","version":">= 8.5.0, < 8.5.1"},{"status":"affected","version":">= 8.3.5, < 8.4.3"},{"status":"affected","version":">= 8.0.0, < 8.3.5"},{"status":"affected","version":">= 7.0.0, < 7.6.9"},{"status":"affected","version":">= 6.0.0, < 6.2.2"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103922","source_modified_at":"2026-10-01T18:01:54.381Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"github.com/ionic-team/capacitor-swift-pm","vendor":"swift","versions":[{"status":"affected","version":">= 8.5.0, < 8.5.1"},{"status":"affected","version":">= 8.3.5, < 8.4.3"},{"status":"affected","version":">= 8.0.0, < 8.3.5"},{"status":"affected","version":">= 7.0.0, < 7.6.9"},{"status":"affected","version":">= 6.0.0, < 6.2.2"}],"defaultStatus":null},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/android","ecosystem":"npm","purl":"pkg:npm/%40capacitor/android"},"ranges":[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.2.2"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/android","ecosystem":"npm","purl":"pkg:npm/%40capacitor/android"},"ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.6.9"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/ios","ecosystem":"npm","purl":"pkg:npm/%40capacitor/ios"},"ranges":[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.2.2"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/ios","ecosystem":"npm","purl":"pkg:npm/%40capacitor/ios"},"ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.6.9"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"github.com/ionic-team/capacitor-swift-pm","ecosystem":"SwiftURL","purl":"pkg:swift/github.com/ionic-team/capacitor-swift-pm"},"ranges":[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.2.2"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"github.com/ionic-team/capacitor-swift-pm","ecosystem":"SwiftURL","purl":"pkg:swift/github.com/ionic-team/capacitor-swift-pm"},"ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.6.9"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"com.capacitorjs:core","ecosystem":"Maven","purl":"pkg:maven/com.capacitorjs/core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.2.2"}]}],"versions":["6.0.0","6.1.0","6.1.1","6.1.2","6.2.0","6.2.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"com.capacitorjs:core","ecosystem":"Maven","purl":"pkg:maven/com.capacitorjs/core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.6.9"}]}],"versions":["7.0.0","7.0.1","7.1.0","7.2.0","7.3.0","7.4.0","7.4.2","7.4.3","7.4.4","7.4.5","7.5.0","7.6.0","7.6.1","7.6.2","7.6.3","7.6.4","7.6.5","7.6.6","7.6.7","7.6.8"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/android","ecosystem":"npm","purl":"pkg:npm/%40capacitor/android"},"ranges":[{"type":"SEMVER","events":[{"introduced":"8.5.0"},{"fixed":"8.5.1"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/ios","ecosystem":"npm","purl":"pkg:npm/%40capacitor/ios"},"ranges":[{"type":"SEMVER","events":[{"introduced":"8.5.0"},{"fixed":"8.5.1"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"github.com/ionic-team/capacitor-swift-pm","ecosystem":"SwiftURL","purl":"pkg:swift/github.com/ionic-team/capacitor-swift-pm"},"ranges":[{"type":"SEMVER","events":[{"introduced":"8.5.0"},{"fixed":"8.5.1"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"com.capacitorjs:core","ecosystem":"Maven","purl":"pkg:maven/com.capacitorjs/core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.5.0"},{"fixed":"8.5.1"}]}],"versions":["8.5.0"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"com.capacitorjs:core","ecosystem":"Maven","purl":"pkg:maven/com.capacitorjs/core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.3.5"},{"fixed":"8.4.3"}]}],"versions":["8.4.0","8.4.1","8.4.2"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/android","ecosystem":"npm","purl":"pkg:npm/%40capacitor/android"},"ranges":[{"type":"SEMVER","events":[{"introduced":"8.3.5"},{"fixed":"8.4.3"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/ios","ecosystem":"npm","purl":"pkg:npm/%40capacitor/ios"},"ranges":[{"type":"SEMVER","events":[{"introduced":"8.3.5"},{"fixed":"8.4.3"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"github.com/ionic-team/capacitor-swift-pm","ecosystem":"SwiftURL","purl":"pkg:swift/github.com/ionic-team/capacitor-swift-pm"},"ranges":[{"type":"SEMVER","events":[{"introduced":"8.3.5"},{"fixed":"8.4.3"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"github.com/ionic-team/capacitor-swift-pm","ecosystem":"SwiftURL","purl":"pkg:swift/github.com/ionic-team/capacitor-swift-pm"},"ranges":[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"last_affected":"8.3.4"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"com.capacitorjs:core","ecosystem":"Maven","purl":"pkg:maven/com.capacitorjs/core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"last_affected":"8.3.4"}]}],"versions":["8.0.0","8.0.1","8.0.2","8.1.0","8.2.0","8.3.0","8.3.1","8.3.2","8.3.3","8.3.4"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/android","ecosystem":"npm","purl":"pkg:npm/%40capacitor/android"},"ranges":[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"last_affected":"8.3.4"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/ios","ecosystem":"npm","purl":"pkg:npm/%40capacitor/ios"},"ranges":[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"last_affected":"8.3.4"}]}],"versions":[]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/android"},"version":"6.2.2"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/android"},"version":"7.6.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/ios"},"version":"6.2.2"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/ios"},"version":"7.6.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"swift","name":"github.com/ionic-team/capacitor-swift-pm"},"version":"6.2.2"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"swift","name":"github.com/ionic-team/capacitor-swift-pm"},"version":"7.6.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"com.capacitorjs:core"},"version":"6.2.2"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"com.capacitorjs:core"},"version":"7.6.9"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/android"},"version":"8.5.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/ios"},"version":"8.5.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"swift","name":"github.com/ionic-team/capacitor-swift-pm"},"version":"8.5.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"com.capacitorjs:core"},"version":"8.5.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"com.capacitorjs:core"},"version":"8.4.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/android"},"version":"8.4.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@capacitor/ios"},"version":"8.4.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T22:53:12Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"swift","name":"github.com/ionic-team/capacitor-swift-pm"},"version":"8.4.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/android","ecosystem":"npm","purl":"pkg:npm/%40capacitor/android"},"version":"6.2.2"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/android","ecosystem":"npm","purl":"pkg:npm/%40capacitor/android"},"version":"7.6.9"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/ios","ecosystem":"npm","purl":"pkg:npm/%40capacitor/ios"},"version":"6.2.2"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/ios","ecosystem":"npm","purl":"pkg:npm/%40capacitor/ios"},"version":"7.6.9"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"github.com/ionic-team/capacitor-swift-pm","ecosystem":"SwiftURL","purl":"pkg:swift/github.com/ionic-team/capacitor-swift-pm"},"version":"6.2.2"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"github.com/ionic-team/capacitor-swift-pm","ecosystem":"SwiftURL","purl":"pkg:swift/github.com/ionic-team/capacitor-swift-pm"},"version":"7.6.9"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"com.capacitorjs:core","ecosystem":"Maven","purl":"pkg:maven/com.capacitorjs/core"},"version":"6.2.2"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"com.capacitorjs:core","ecosystem":"Maven","purl":"pkg:maven/com.capacitorjs/core"},"version":"7.6.9"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/android","ecosystem":"npm","purl":"pkg:npm/%40capacitor/android"},"version":"8.5.1"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/ios","ecosystem":"npm","purl":"pkg:npm/%40capacitor/ios"},"version":"8.5.1"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"github.com/ionic-team/capacitor-swift-pm","ecosystem":"SwiftURL","purl":"pkg:swift/github.com/ionic-team/capacitor-swift-pm"},"version":"8.5.1"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"com.capacitorjs:core","ecosystem":"Maven","purl":"pkg:maven/com.capacitorjs/core"},"version":"8.5.1"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"com.capacitorjs:core","ecosystem":"Maven","purl":"pkg:maven/com.capacitorjs/core"},"version":"8.4.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/android","ecosystem":"npm","purl":"pkg:npm/%40capacitor/android"},"version":"8.4.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"@capacitor/ios","ecosystem":"npm","purl":"pkg:npm/%40capacitor/ios"},"version":"8.4.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","source_modified_at":"2026-10-05T23:00:05.499076955Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"github.com/ionic-team/capacitor-swift-pm","ecosystem":"SwiftURL","purl":"pkg:swift/github.com/ionic-team/capacitor-swift-pm"},"version":"8.4.3"}],"cvss":9.3,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.00213,"percentile":0.11025,"score_date":"2026-10-23"},"published_at":"2026-10-01T17:27:05.758Z","modified_at":"2026-10-05T23:00:05.499076955Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-05T22:53:12Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-103922","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-01T18:01:54.381Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-rvm3-566m-v7fv","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-10-05T23:00:05.499076955Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-103922","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["GitHub Advisory Database","CVE List","OSV","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/ionic-team/capacitor/security/advisories/GHSA-rvm3-566m-v7fv","tags":["x_refsource_CONFIRM"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103922","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://github.com/ionic-team/capacitor/commit/430356a91e1419fc66862dc09835081aa501677e","tags":["x_refsource_MISC"]},{"url":"https://github.com/ionic-team/capacitor/commit/745b5f805bf77bc6463977cc7d718cd9de44ccbc","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://github.com/ionic-team/capacitor/commit/80b6c5e81d062e1e158914040f49e044d95b7ccb","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/ionic-team/capacitor/commit/85ccc44151fdd5ae5e0d806d875766ef4b84ad5d","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/ionic-team/capacitor/commit/af9a287fef45f0ac68ce640cb42fed2d06b0f1b4","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/ionic-team/capacitor/commit/d5e3170ba0ff155fc542b7e6d16cff5201406540","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/ionic-team/capacitor/commit/ee586ae680887ba99d066616f976db149542d922","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/ionic-team/capacitor/releases/tag/8.5.1","tags":["x_refsource_MISC"]},{"url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv","source":"GitHub Advisory Database"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","assessed_at":"2026-10-01T18:01:35.925716Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-05T23:00:05.499076955Z","content_hash":"a7934deacc5183486ca641bb6c9455e136ce79fb5ecdac585e0436c7eb847433"}}