CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

github.com/projectcapsule/capsule is vulnerable to namespace label injection. The vulnerability is due to improper validation of labels in system namespaces, which allows an attacker to inject arbitrary labels, bypass multi-tenant isolation, and escalate privileges to access cross-tenant resource...

9CVSS7.1AI score0.00449EPSS

Exploits0References4Affected Software1

Microsoft CVE•added 2025/09/03 9:33 p.m.•6 views

Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.

...

7.5CVSS7AI score0.01184EPSS

Exploits1

OSV•added 2025/08/29 2:52 p.m.•4 views

GO-2025-3893 Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule...

9CVSS7AI score0.00449EPSS

Exploits0References3

Trellix•added 2025/08/27 12:0 a.m.•9 views

The Bug Report – August 2025 Edition

The Bug Report – August 2025 Edition By Jonathan Omakun, Tola Olawale · August 27, 2025 Why am I here? Welcome back to The Bug Report! Did you miss us? The Trellix Advanced Research Center has been playing a high-stakes game of whack-a-mole with this month's vulnerabilities. We've dug through all...

10CVSS8.1AI score0.19972EPSS

Exploits13

RedhatCVE•added 2025/08/20 5:33 p.m.•17 views

CVE-2025-55205

Capsule is a multi-tenancy and policy-based framework for Kubernetes. A namespace label injection vulnerability in Capsule v0.10.3 and earlier allows authenticated tenant users to inject arbitrary labels into system namespaces kube-system, default, capsule-system, bypassing multi-tenant isolation...

9CVSS6.7AI score0.00449EPSS

Exploits0References1

Github Security Blog•added 2025/08/18 9:0 p.m.•13 views

Capsule tenant owners with "patch namespace" permission can hijack system namespaces label

Summary A namespace label injection vulnerability in Capsule v0.10.3 allows authenticated tenant users to inject arbitrary labels into system namespaces kube-system, default, capsule-system, bypassing multi-tenant isolation and potentially accessing cross-tenant resources through TenantResource...

9CVSS7.9AI score0.00449EPSS

Exploits0References5Affected Software1

OSV•added 2025/08/18 9:0 p.m.•6 views

GHSA-FCPM-6MXQ-M5VV Capsule tenant owners with "patch namespace" permission can hijack system namespaces label

9CVSS7.9AI score0.00449EPSS

Exploits0References5