PkgSeer

Vulnerability GO-2026-6519

Unknown

3 hours ago

Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation in github.com/projectcapsule/capsule

v0.13.0 - v0.13.6

Summary

Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation in github.com/projectcapsule/capsule

Details

Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation in github.com/projectcapsule/capsule

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement in github.com/projectcapsule/capsule

v0.0.1 - v0.13.6 GO-2026-6520

Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic in github.com/projectcapsule/capsule

v0.13.0 - v0.13.6 GO-2026-6521

Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation

v0.13.0 - v0.13.6 GHSA-f94q-w3w8-cj67

Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement

v0.0.1 - v0.13.6 GHSA-gjw4-3v3v-rqxg

Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic

v0.13.0 - v0.13.6 GHSA-gxjc-74v5-3vx3

View all vulnerabilities for these packages

Impacted packages

github.com/projectcapsule/capsule

Timeline

Published

3 hours ago

Last Modified

2 hours ago