- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 11 · 1 critical, 2 high, 7 medium, 1 low
- Registry
- pkg.go.dev
Advisories 11
- CVE-2026-61795Medium 6.8
Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook…
Affected: from 0.13.0, fixed in 0.13.7.
- CVE-2026-61672High 7.1
Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement
Affected: fixed in 0.13.7.
- CVE-2026-61794Medium 6.8
Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic
Affected: from 0.13.0, fixed in 0.13.7.
- CVE-2026-55636Medium 5.7
Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected
Affected: from 0.13.0, fixed in 0.13.6.
- CVE-2026-65835Medium 6.6
Capsule: Incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation…
Affected: from 0.13.0, fixed in 0.13.8.
- CVE-2026-65834Medium 6.8
Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests
Affected: fixed in 0.13.8.
- CVE-2026-30963Low 3.9
Capsule Namespace Hijacking via subresource
Affected: fixed in 0.13.0.
- CVE-2026-22872Medium 6.9
Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability
Affected: fixed in 0.13.0.
- CVE-2025-55205Critical 9.1
Capsule tenant owners with "patch namespace" permission can hijack system namespaces label
Affected: fixed in 0.10.4.
- CVE-2024-39690High 8.5
Capsule tenant owner with "patch namespace" permission can hijack system namespaces
Affected: all versions; fixed in 0.7.1.
- CVE-2023-46254Medium 4.3
Service accounts can see namespaces of other tenants in capsule-proxy
Affected: fixed in 0.4.5.