Vulnerabilities

TI-2026-44233 CVE-2026-61795 · GHSA-f94q-w3w8-cj67

Incorrect comparison in projectcapsule capsule

LOW 31

Capsule is a multi-tenancy and policy-based framework for Kubernetes.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00587 Published 2026-09-18 Fixed in 0.13.7 CWE-697

TI-2026-44157 CVE-2026-61672 · GHSA-gjw4-3v3v-rqxg

Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement

MEDIUM 64

Capsule is a multi-tenancy and policy-based framework for Kubernetes.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00334 Published 2026-09-18 Fixed in 0.13.7 CWE-697

TI-2026-44232 CVE-2026-61794 · GHSA-gxjc-74v5-3vx3

Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic

MEDIUM 63

Capsule is a multi-tenancy and policy-based framework for Kubernetes.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00587 Published 2026-09-18 Fixed in 0.13.7 CWE-20

TI-2026-40163 CVE-2026-55636 · GHSA-gwxr-7h77-7777

Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected

LOW 26

Capsule is a multi-tenancy and policy-based framework for Kubernetes.

CVSS 3.1MEDIUM 5.7 Network High privileges User interaction EPSS 0.00385 Published 2026-09-15 Fixed in 0.13.6 CWE-863

TI-2026-46912 CVE-2026-65835 · GHSA-jr6p-8pjj-mfx6

Improper privilege management in projectcapsule capsule

MEDIUM 62

Capsule is a multi-tenancy and policy-based framework for Kubernetes.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00235 Published 2026-07-30 Fixed in 0.13.8 CWE-269

TI-2026-46911 CVE-2026-65834 · GHSA-68cj-mvg9-rgm2

Improper input validation in projectcapsule capsule

MEDIUM 63

Capsule is a multi-tenancy and policy-based framework for Kubernetes.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00322 Published 2026-07-30 Fixed in 0.13.8 CWE-20

TI-2026-23788 CVE-2026-30963 · GHSA-2ww6-hf35-mfjm

Capsule Namespace Hijacking via subresource

MEDIUM 52

Capsule is a multi-tenancy and policy-based framework for Kubernetes.

CVSS 3.1LOW 3.9 Network High privileges User interaction EPSS 0.00219 Published 2026-06-01 Fixed in 0.13.0 CWE-20

TI-2026-18364 CVE-2026-22872 · GHSA-qjjm-7j9w-pw72

Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability

HIGH 70

Capsule is a multi-tenancy and policy-based framework for Kubernetes.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.0068 Published 2026-06-01 Fixed in 0.13.0 CWE-20

TI-2025-34881 CVE-2025-55205 · GHSA-fcpm-6mxq-m5vv

Capsule tenant owners with "patch namespace" permission can hijack system namespaces label

HIGH 72

Capsule is a multi-tenancy and policy-based framework for Kubernetes.

CVSS 3.1CRITICAL 9.1 Network Low privileges User interaction EPSS 0.0046 Published 2025-08-18 Fixed in 0.10.4 CWE-863

TI-2024-26614 CVE-2024-39690 · GHSA-mq69-4j5w-3qwp

Capsule tenant owner with "patch namespace" permission can hijack system namespaces

HIGH 73

Capsule is a multi-tenancy and policy-based framework for Kubernetes.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00541 Published 2024-08-20 Fixed in 0.7.1 CWE-863

TI-2023-26175 CVE-2023-48312 · GHSA-fpvw-6m5v-hqfp

Authentication bypass using an empty token in capsule-proxy

MEDIUM 43

capsule-proxy is a reverse proxy for the capsule operator project.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00574 Published 2023-11-24 Fixed in 0.4.6 CWE-287

TI-2023-24881 CVE-2023-46254 · GHSA-6758-979h-249x

Service accounts can see namespaces of other tenants in capsule-proxy

LOW 21

capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.005 Published 2023-11-06 Fixed in 0.4.5 CWE-200

Vulnerabilities

Filters