Go/github.com/projectcapsule/capsule CVE-2026-61672: high 7.1, EPSS 0.33%

Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement

Action: Upgrade github.com/projectcapsule/capsule to 0.13.7 or later.

go get github.com/projectcapsule/capsule@v0.13.7

Affected

Fixed versions

Sources

• osv: GHSA-gjw4-3v3v-rqxg
• https://github.com/projectcapsule/capsule/security/advisories/GHSA-gjw4-3v3v-rqxg
• https://github.com/projectcapsule/capsule/pull/1982
• https://github.com/projectcapsule/capsule/commit/755cef54bf4a1bc56d6692130132bc70755bef46
• https://github.com/projectcapsule/capsule
• https://github.com/projectcapsule/capsule/releases/tag/v0.13.7

CVE-2026-61672 · published 2026-09-18T17:14:31Z · modified 2026-09-28T17:10:41.769858438Z · JSON