Projectcapsule

12 CVEs in 2 Projectcapsule products, including Capsule, Capsule-Proxy. Newest: CVE-2026-61795 (2026-09-18). Severity, EPSS and public exploits for each.

Projectcapsule products with known CVEs

ProductCVEs
Capsule10
Capsule-Proxy2
Projectcapsule CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-61795Medium6.82026-09-18Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, hostnameRegexHandler.OnUpdate in internal/webhook/tenant/valida…
CVE-2026-61794Medium6.82026-09-18Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, the Tenant update validation in internal/webhook/tenant/validat…
CVE-2026-61672High7.12026-09-18Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenListSpec.ExactMatch in pkg/api/forbidden_list.go sorts denied m…
CVE-2026-55636Medium5.72026-09-15Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.6, charts/capsule/templates/configuration.yaml configures the vali…
CVE-2026-65835Medium6.62026-07-30Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.8, after the incomplete CVE-2026-22872 fix, TenantResource RawItem…
CVE-2026-65834Medium6.82026-07-30Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and Capsule…
CVE-2026-30963Low3.92026-06-01Capsule is a multi-tenancy and policy-based framework for Kubernetes. To defend against namespace hijacking achieved through update/patch operations on namespa…
CVE-2026-22872Critical9.12026-06-01Capsule is a multi-tenancy and policy-based framework for Kubernetes. The Capsule Controller runs with cluster-admin privileges. Although the TenantResource Ra…
CVE-2025-55205Critical9.02025-08-18Capsule is a multi-tenancy and policy-based framework for Kubernetes. A namespace label injection vulnerability in Capsule v0.10.3 and earlier allows authentic…
CVE-2024-39690High8.42024-08-20Capsule is a multi-tenancy and policy-based framework for Kubernetes. In Capsule v0.7.0 and earlier, the tenant-owner can patch any arbitrary namespace that ha…
CVE-2023-48312Critical9.82023-11-24capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalation vulnerability which is based on a mi…
CVE-2023-46254Medium4.32023-11-06capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework. A bug in the RoleBinding reflector used by `capsule-proxy` gives ServiceAccoun…