spinnaker vulnerabilities
9 published CVEs name spinnaker among the affected products.
- 9Published CVEs9 of them scored
- 5Last 12 monthspublished in the last year
- 3Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-55175
Spinnaker: Improper yaml processing on kustomize bake operations
spinnaker · spinnaker
High7.5 - CVE-2026-44795
Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types
spinnaker · spinnaker
High8.8 - CVE-2026-32613
Spinnaker vulnerable to RCE via expression parsing due to unrestricted context handling
spinnaker · spinnaker
Critical10.0 - CVE-2026-32604
Spinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths
spinnaker · spinnaker
Critical10.0 - CVE-2025-61916
Spinnaker vulnerable to SSRF due to improper restrictions on http from user input
spinnaker · spinnaker
High7.9 - CVE-2023-39348
Improper log output when using GitHub Status Notifications in spinnaker
spinnaker · spinnaker
Medium4.0 - CVE-2022-23506
Spinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer builds
spinnaker · spinnaker
Medium4.3 - CVE-2021-43832
Improper Access Control in spinnaker
spinnaker · spinnaker
Critical10.0 - CVE-2021-39143
Path Traversal in spinnaker
spinnaker · spinnaker
Medium6.6