GO-2026-5406Published
Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-55636 · Microsoft / collected KEV context
cve-program · CVE-2026-55636
- https://github.com/projectcapsule/capsule/security/advisories/GHSA-gwxr-7h77-7777
- https://github.com/projectcapsule/capsule/pull/1966
- https://github.com/projectcapsule/capsule/commit/af2f37793e789b2301da8ed8dfb52ab60affebb6
- https://github.com/projectcapsule/capsule/releases/tag/v0.13.6
euvd · EUVD-2026-78670
- https://github.com/projectcapsule/capsule/security/advisories/GHSA-gwxr-7h77-7777
- https://github.com/projectcapsule/capsule/pull/1966
- https://github.com/projectcapsule/capsule/commit/af2f37793e789b2301da8ed8dfb52ab60affebb6
- https://github.com/projectcapsule/capsule/releases/tag/v0.13.6
nvd · CVE-2026-55636
- https://github.com/projectcapsule/capsule/commit/af2f37793e789b2301da8ed8dfb52ab60affebb6
- https://github.com/projectcapsule/capsule/pull/1966
- https://github.com/projectcapsule/capsule/releases/tag/v0.13.6
- https://github.com/projectcapsule/capsule/security/advisories/GHSA-gwxr-7h77-7777
osv · GHSA-gwxr-7h77-7777
- https://github.com/projectcapsule/capsule/security/advisories/GHSA-gwxr-7h77-7777
- https://github.com/projectcapsule/capsule
osv · GO-2026-5406
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.