Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/06/17 6:14 p.m.21 views

Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected

Summary Capsule v0.13.2 webhook rules contain namespace/finalize singular instead of namespaces/finalize plural. K8s requires plural. The finalize defense from CVE-2026-30963 fix is absent. Details PUT to /api/v1/namespaces//finalize has resource=namespaces plural. The singular rule never matches...

3.9CVSS5.3AI score0.00203EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder