Description
Capsule is a multi-tenancy and policy-based framework for Kubernetes. In Capsule v0.7.0 and earlier, the tenant-owner can patch any arbitrary namespace that has not been taken over by a tenant (i.e., namespaces without the ownerReference field), thereby gaining control of that namespace. Version 0.7.1 contains a patch.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| projectcapsule | capsule | <= 0.7.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/projectcapsule/capsule | < 0.7.1 | 0.7.1 | GHSA-mq69-4j5w-3qwp |
| Go | github.com/projectcapsule/capsule | all versions | — | GO-2024-3077 |