Go/github.com/projectcapsule/capsule CVE-2024-39690: high 8.4, EPSS 0.54%
Capsule tenant owner with "patch namespace" permission can hijack system namespaces
Action: Upgrade github.com/projectcapsule/capsule to 0.7.1 or later.
go get github.com/projectcapsule/capsule@v0.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.1 | - |
Fixed versions
| 0.7.1 |
Sources
- osv: GHSA-mq69-4j5w-3qwp
- https://github.com/projectcapsule/capsule/security/advisories/GHSA-mq69-4j5w-3qwp
- https://nvd.nist.gov/vuln/detail/CVE-2024-39690
- https://github.com/projectcapsule/capsule/commit/d620b0457ddec01616b8eab8512a10611611f584
- https://github.com/projectcapsule/capsule
CVE-2024-39690 · published · modified · JSON