Skip to content
OpenAdvisories

Package · Go

github.com/projectcapsule/capsule

11 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    Capsule tenant owners with "patch namespace" permission can hijack system namespaces label

    Capsule is a multi-tenancy and policy-based framework for Kubernetes. A namespace label injection vulnerability in Capsule v0.10.3 and earlier allows authenticated tenant users to inject arbitrary labels into system namespaces (kube-system, default, capsule-s…