CVE-2026-61672

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7 , the ForbiddenListSpec.ExactMatch function in pkg/api/forbidden_list.go sorts denied metadata keys case-insensitively but then calls sort.SearchStrings, which assumes byte-order sorting. When an administrator's...