Skip to content
Threat Feed
Subscribe

Tag

Validation-Bypass

3 briefs RSS
medium threat

Capsule Namespace and Service Metadata Enforcement Bypass

A vulnerability in Capsule's metadata validation logic allows tenant owners to bypass configured forbidden labels and annotations, enabling unauthorized configuration changes to Kubernetes resources.

Capsule Individual Tenant kubernetes misconfiguration privilege-escalation validation-bypass
1t
high advisory

SSRF Protection Bypass in dssrf Library via URL Normalization

The dssrf library version 1.0.3 contains an SSRF bypass vulnerability in the is_url_safe function caused by improper character removal before URL parsing, allowing attackers to access restricted internal resources.

dssrf ssrf validation-bypass cve-2026-54722
1t 1c
high advisory

Fastify Body Schema Validation Bypass via Leading Space in Content-Type Header

Fastify v5.x is vulnerable to a body schema validation bypass, allowing attackers to circumvent request body validation by prepending a single space to the Content-Type header, potentially compromising data integrity and security constraints.

fastify validation-bypass webserver
2r 1t 2c