Skip to content
OpenAdvisories

Vendor

projectcapsule

12 known vulnerabilities.

Products

capsule 10 capsule-proxy 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-55205

    Capsule tenant owners with "patch namespace" permission can hijack system namespaces label

    Capsule is a multi-tenancy and policy-based framework for Kubernetes. A namespace label injection vulnerability in Capsule v0.10.3 and earlier allows authenticated tenant users to inject arbitrary labels into system namespaces (kube-system, default, capsule-s…

    projectcapsule capsule github.com/projectcapsule/capsule Go
  • Critical 9.8
    CVE-2023-48312

    Authentication bypass using an empty token in capsule-proxy

    capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalation vulnerability which is based on a missing check if the user is authenticated based on the `TokenReview` result. All the clusters running…

    projectcapsule capsule-proxy github.com/projectcapsule/capsule-proxy github.com/clastix/capsule-proxy Go