Skip to content
OpenAdvisories

Package · Go

github.com/clastix/capsule

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2022-46167

    Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace

    Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to version 0.1.3, a ServiceAccount deployed in a Tenant Namespace, when granted with `PATCH` capabilities on its own Namespace, is able to edit it and remove the Owner Reference, brea…

    clastix capsule github.com/clastix/capsule Go