Security
فارسی
All products

github.com/projectcapsule/capsule

Go · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panicCVE-2026-61794 · GHSA-GXJC-74V5-3VX3Version ranges need review. github.com/projectcapsule/capsule Go Medium Fix reported
Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validationCVE-2026-61795 · GHSA-F94Q-W3W8-CJ67Version ranges need review. github.com/projectcapsule/capsule Go Medium Fix reported
Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcementCVE-2026-61672 · GHSA-GJW4-3V3V-RQXGVersion ranges need review. github.com/projectcapsule/capsule Go High Fix reported
capsule-proxy service discloses Namespaces of colliding tenants to owners of different tenants with the same ServiceAccount nameCVE-2023-46254 · GHSA-6758-979H-249X github.com/projectcapsule/capsule-proxygithub.com/projectcapsule/capsule Go Medium Fix reported
Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation)CVE-2026-65835 · GHSA-JR6P-8PJJ-MFX6Version ranges need review. github.com/projectcapsule/capsule Go Medium Fix reported
Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requestsCVE-2026-65834 · GHSA-68CJ-MVG9-RGM2Version ranges need review. github.com/projectcapsule/capsule Go Medium Fix reported
Capsule TenantResource RawItems Cluster-Scoped Resource Creation VulnerabilityCVE-2026-22872 · GHSA-QJJM-7J9W-PW72Version ranges need review. github.com/projectcapsule/capsule Go Medium Fix reported
Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotectedCVE-2026-55636 · GHSA-GWXR-7H77-7777Version ranges need review. github.com/projectcapsule/capsule Go Medium Fix reported
Capsule Namespace Hijacking via subresourceCVE-2026-30963 · GHSA-2WW6-HF35-MFJMVersion ranges need review. github.com/projectcapsule/capsule Go Low Fix reported
Capsule tenant owners with "patch namespace" permission can hijack system namespaces labelCVE-2025-55205 · GHSA-FCPM-6MXQ-M5VVVersion ranges need review. github.com/projectcapsule/capsule Go Critical Fix reported
Capsule tenant owner with "patch namespace" permission can hijack system namespacesCVE-2024-39690 · GHSA-MQ69-4J5W-3QWPVersion ranges need review. github.com/projectcapsule/capsule Go High Fix reported