Vulnerabilities

TI-2026-44925 CVE-2026-62845

Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers

MEDIUM 55

Kamaji is the Hosted Control Plane Manager for Kubernetes.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00324 Published 2026-07-30 Fixed in 26.6.4-edge CWE-89

TI-2026-44467 CVE-2026-62246

HIGH 72

Kamaji is the Hosted Control Plane Manager for Kubernetes.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00363 Published 2026-07-30 Fixed in 26.7.4-edge CWE-284

TI-2024-28448 CVE-2024-42480 · GHSA-6r4j-4rjc-8vw5

HIGH 76

Kamaji is the Hosted Control Plane Manager for Kubernetes.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00622 Published 2024-08-12 No fix listed CWE-284

TI-2023-26175 CVE-2023-48312 · GHSA-fpvw-6m5v-hqfp

MEDIUM 43

capsule-proxy is a reverse proxy for the capsule operator project.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00574 Published 2023-11-24 Fixed in 0.4.6 CWE-287

TI-2023-24881 CVE-2023-46254 · GHSA-6758-979h-249x

LOW 21

capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.005 Published 2023-11-06 Fixed in 0.4.5 CWE-200

TI-2022-22811 CVE-2022-46167 · GHSA-x45c-cvp8-q4fm

MEDIUM 42

Capsule is a multi-tenancy and policy-based framework for Kubernetes.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00961 Published 2022-12-02 Fixed in 0.1.3 CWE-863

TI-2022-07704 CVE-2022-23652 · GHSA-9cwv-cppx-mqjm

HIGH 73

capsule-proxy is a reverse proxy for Capsule Operator which provides multi-tenancy in Kubernetes.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01397 Published 2022-02-22 Fixed in 0.2.1 CWE-287