https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-42480.htmlhttps://patchthecve.com/cve/CVE-2024-42480.htmlWed, 17 Jun 2026 07:49:31 +0000HIGH 8.1: Kamaji is the Hosted Control Plane Manager for Kubernetes. In versions 1.0.0 and earlier, Kamaji uses an "open at the top" range definition in RBAC for etcd roles leading to some TCPs API servers being able to read, write, and delete the data of other control planes. This vulnerability is fixed in ehttps://patchthecve.com/cve/CVE-2023-48312.htmlhttps://patchthecve.com/cve/CVE-2023-48312.htmlWed, 17 Jun 2026 06:33:59 +0000CRITICAL 9.8: capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalation vulnerability which is based on a missing check if the user is authenticated based on the `TokenReview` result. All the clusters running with the `anonymous-auth` Kubernetes APIhttps://patchthecve.com/cve/CVE-2023-46254.htmlhttps://patchthecve.com/cve/CVE-2023-46254.htmlWed, 17 Jun 2026 06:30:31 +0000MEDIUM 4.3: capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework. A bug in the RoleBinding reflector used by `capsule-proxy` gives ServiceAccount tenant owners the right to list Namespaces of other tenants backed by the same owner kind and name. For example consider two tenants `solar