CVE-2026-65835
2 advisories.
Go/github.com/projectcapsule/capsule CVE-2026-65835: medium 6.6
Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation)
Action: Upgrade github.com/projectcapsule/capsule to 0.13.8 or later.
go get github.com/projectcapsule/capsule@v0.13.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.13.0 | 0.13.8 | - |
Fixed versions
| 0.13.8 |
Sources
- osv: GHSA-jr6p-8pjj-mfx6
- https://github.com/projectcapsule/capsule/security/advisories/GHSA-jr6p-8pjj-mfx6
- https://nvd.nist.gov/vuln/detail/CVE-2026-65835
- https://github.com/projectcapsule/capsule
- https://github.com/projectcapsule/capsule/releases/tag/v0.13.8
CVE-2026-65835 · published · modified · JSON
Go/github.com/projectcapsule/capsule CVE-2026-65835: unknown
Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation) in github.com/projectcapsule/ca
Action: Upgrade github.com/projectcapsule/capsule to 0.13.8 or later.
go get github.com/projectcapsule/capsule@v0.13.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.13.0 | 0.13.8 | - |
Fixed versions
| 0.13.8 |
Sources
- osv: GO-2026-6157
- https://github.com/projectcapsule/capsule/security/advisories/GHSA-jr6p-8pjj-mfx6
- https://nvd.nist.gov/vuln/detail/CVE-2026-65835
- https://github.com/projectcapsule/capsule/releases/tag/v0.13.8
CVE-2026-65835 · published · modified · JSON