Skip to content
OpenAdvisories

Vendor

projectcapsule

12 known vulnerabilities.

Products

capsule 10 capsule-proxy 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-61672

    Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement

    Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenListSpec.ExactMatch in pkg/api/forbidden_list.go sorts denied metadata keys case-insensitively and then uses sort.SearchStrings, which assumes byte-order sorting. …

    projectcapsule capsule github.com/projectcapsule/capsule Go
  • High 8.5
    CVE-2024-39690

    Capsule tenant owner with "patch namespace" permission can hijack system namespaces

    Capsule is a multi-tenancy and policy-based framework for Kubernetes. In Capsule v0.7.0 and earlier, the tenant-owner can patch any arbitrary namespace that has not been taken over by a tenant (i.e., namespaces without the ownerReference field), thereby gaini…

    projectcapsule capsule github.com/projectcapsule/capsule Go