Security

SECURITY.md

Security Policy

Reporting a Vulnerability

Please report security vulnerabilities via email to security@ionic.io.

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
GHSA-rvm3-566m-v7fv published Aug 31, 2026 by ItsChaceD

Critical

Learn more about advisories related to ionic-team/capacitor in the GitHub Advisory Database