github.com/projectcapsule/capsule vulnerabilities
CVEs whose affected-version data names the github.com/projectcapsule/capsule package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-65834Medium· 6.8Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests
Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests
▾ Sunlitprojectcapsule · github.com/projectcapsule/capsuleEPSS 0.32%via GHSA
CVE-2026-65835Medium· 6.6Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation)
Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation)
▾ Sunlitprojectcapsule · github.com/projectcapsule/capsuleEPSS 0.24%via GHSA
CVE-2023-46254Medium· 4.3capsule-proxy service discloses Namespaces of colliding tenants to owners of different tenants with the same ServiceAccount name
capsule-proxy service discloses Namespaces of colliding tenants to owners of different tenants with the same ServiceAccount name
▾ Sunlitprojectcapsule · github.com/projectcapsule/capsuleEPSS 0.41%via OSV