Go/github.com/projectcapsule/capsule CVE-2026-65835: medium 6.6, EPSS 0.33%
Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation)
Action: Upgrade github.com/projectcapsule/capsule to 0.13.8 or later.
go get github.com/projectcapsule/capsule@v0.13.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.13.0 | 0.13.8 | - |
Fixed versions
| 0.13.8 |
Sources
- osv: GHSA-jr6p-8pjj-mfx6
- https://github.com/projectcapsule/capsule/security/advisories/GHSA-jr6p-8pjj-mfx6
- https://nvd.nist.gov/vuln/detail/CVE-2026-65835
- https://github.com/projectcapsule/capsule
- https://github.com/projectcapsule/capsule/releases/tag/v0.13.8
CVE-2026-65835 · published · modified · JSON