CVE-2026-65834

6.8 Moyenne

Publiée le 30/07/2026 à 22:18 · Modifiée le 31/07/2026 à 14:16 · Analyse NVD reportée · Source : security-advisories@github.com

Description

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and CapsuleConfiguration.Spec.NodeMetadata.ForbiddenAnnotations.Regex were not validated by the configuration admission webhook, allowing a Cluster Admin to store a malformed regex that later reached regexp.MustCompile in pkg/api/forbidden_list.go through internal/webhook/node/user_metadata.go and crashed the node admission webhook on Node create, update, or patch requests. This issue is fixed in version 0.13.8.

Traduire en français

Produits concernés

projectcapsule capsule

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.8 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-20
CWE-248

Références

https://github.com/projectcapsule/capsule/releases/tag/v0.13.8
https://github.com/projectcapsule/capsule/security/advisories/GHSA-68cj-mvg9-rgm2
https://github.com/projectcapsule/capsule/security/advisories/GHSA-68cj-mvg9-rgm2

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories