clastix vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20241
3. 20262

Newest CVEs

• CVE-2026-62845

  Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers

  clastix · kamaji

  Medium4.7
• CVE-2026-62246

  Kamaji: TenantControlPlane namespace/name collision binds two tenants to the same SQL datastore schema + DB user, breaking per-tenant isolation

  clastix · kamaji

  High8.5
• CVE-2024-42480

  Kamaji's RBAC Roles for `etcd` are not disjunct

  clastix · kamaji

  High8.1
• CVE-2022-46167

  Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace

  clastix · capsule

  High8.8
• CVE-2022-23652

  Privilege escalation using hop-by-hop Connection header

  clastix · capsule-proxy

  High8.8