github.com/projectcapsule/capsule Security Advisories - Go | Ecosyste.ms: Advisories

github.com/projectcapsule/capsule

View on github.com · View on proxy.golang.org

Security Advisories for github.com/projectcapsule/capsule in go

Moderate

17 days ago

Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation) GSA_kwCzR0hTQS1qcjZwLThwamotbWZ4Ns4ABg-L

go github.com/projectcapsule/capsule

Moderate

17 days ago

Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests GSA_kwCzR0hTQS02OGNqLW12ZzktcmdtMs4ABg-K

go github.com/projectcapsule/capsule

Moderate

2 months ago

Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected GSA_kwCzR0hTQS1nd3hyLTdoNzctNzc3N84ABY40

go github.com/projectcapsule/capsule

Moderate

3 months ago

Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability GSA_kwCzR0hTQS1xamptLTdqOXctcHc3Ms4ABXpL

go github.com/projectcapsule/capsule

Low

3 months ago

Capsule Namespace Hijacking via subresource GSA_kwCzR0hTQS0yd3c2LWhmMzUtbWZqbc4ABXpK

go github.com/projectcapsule/capsule

Critical

12 months ago

Capsule tenant owners with "patch namespace" permission can hijack system namespaces label GSA_kwCzR0hTQS1mY3BtLTZteHEtbTV2ds4ABLLn

go github.com/projectcapsule/capsule

High

almost 2 years ago

Capsule tenant owner with "patch namespace" permission can hijack system namespaces GSA_kwCzR0hTQS1tcTY5LTRqNXctM3F3cM4AA-z-

go github.com/projectcapsule/capsule

Moderate

almost 3 years ago

capsule-proxy service discloses Namespaces of colliding tenants to owners of different tenants with the same ServiceAccount name GSA_kwCzR0hTQS02NzU4LTk3OWgtMjQ5eM4AA2-V

go github.com/projectcapsule/capsule-proxy, github.com/projectcapsule/capsule

Filter by Severity

Moderate 5 Low 1 High 1 Critical 1