CVE-2024-39690
2 advisories.
Go/github.com/projectcapsule/capsule CVE-2024-39690: high 8.4
Capsule tenant owner with "patch namespace" permission can hijack system namespaces
Action: Upgrade github.com/projectcapsule/capsule to 0.7.1 or later.
go get github.com/projectcapsule/capsule@v0.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.1 | - |
Fixed versions
| 0.7.1 |
Sources
- osv: GHSA-mq69-4j5w-3qwp
- https://github.com/projectcapsule/capsule/security/advisories/GHSA-mq69-4j5w-3qwp
- https://nvd.nist.gov/vuln/detail/CVE-2024-39690
- https://github.com/projectcapsule/capsule/commit/d620b0457ddec01616b8eab8512a10611611f584
- https://github.com/projectcapsule/capsule
CVE-2024-39690 · published · modified · JSON
Go/github.com/projectcapsule/capsule CVE-2024-39690: unknown
Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2024-3077
- https://github.com/projectcapsule/capsule/security/advisories/GHSA-mq69-4j5w-3qwp
- https://nvd.nist.gov/vuln/detail/CVE-2024-39690
- https://github.com/projectcapsule/capsule/commit/d620b0457ddec01616b8eab8512a10611611f584
CVE-2024-39690 · published · modified · JSON