CVE-2026-55175High 7.5Spinnaker: Improper yaml processing on kustomize bake operations1.1%
CVE-2026-44795High 8.8Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types1.0%
CVE-2026-32613Critical 10.0Spinnaker vulnerable to RCE via expression parsing due to unrestricted context handling0.6%
CVE-2026-32604Critical 10.0Spinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths0.6%
CVE-2025-61916High 7.9Spinnaker vulnerable to SSRF due to improper restrictions on http from user input0.2%
CVE-2023-39348Medium 4.0Improper log output when using GitHub Status Notifications in spinnaker0.4%
CVE-2022-23506Medium 4.3Spinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer builds0.6%
CVE-2021-43832Critical 10.0Improper Access Control in spinnaker2.7%