{"action":"Upgrade github.com/clastix/capsule to 0.1.3 or later.","affected":[{"fixed":"0.1.3","introduced":"0"}],"component":"github.com/clastix/capsule","cve_ids":["CVE-2022-46167"],"ecosystem":"Go","epss":0.00943,"exploited":false,"fixed_versions":["0.1.3"],"ghsa_id":"GHSA-x45c-cvp8-q4fm","id":"tcs_01M5KFRH19EB7S8ZASRY44JPCT","modified_at":"2024-08-21T16:28:50.585029Z","published_at":"2022-12-05T23:08:37Z","references":["https://osv.dev/vulnerability/GHSA-x45c-cvp8-q4fm","https://github.com/clastix/capsule/security/advisories/GHSA-x45c-cvp8-q4fm","https://nvd.nist.gov/vuln/detail/CVE-2022-46167","https://github.com/clastix/capsule/commit/1df430e71be8c4778c82eca3459978ad7d0b4b7b","https://github.com/clastix/capsule/commit/75525ac19254b0c5111e34d7985e2be7bc8b1ac1","https://github.com/clastix/capsule","https://github.com/clastix/capsule/releases/tag/v0.1.3"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-x45c-cvp8-q4fm","url":"https://osv.dev/vulnerability/GHSA-x45c-cvp8-q4fm"}],"summary":"Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace"}