spinnaker

Products

ProductCVEsExploitedLatest
spinnaker9–Jul 10, 2026

Exploited and recent CVEs

  • CVE-2026-55175 High 7.5 Spinnaker: Improper yaml processing on kustomize bake operations 1.1%
  • CVE-2026-44795 High 8.8 Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types 1.0%
  • CVE-2026-32613 Critical 10.0 Spinnaker vulnerable to RCE via expression parsing due to unrestricted context handling 0.6%
  • CVE-2026-32604 Critical 10.0 Spinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths 0.6%
  • CVE-2025-61916 High 7.9 Spinnaker vulnerable to SSRF due to improper restrictions on http from user input 0.2%
  • CVE-2023-39348 Medium 4.0 Improper log output when using GitHub Status Notifications in spinnaker 0.4%
  • CVE-2022-23506 Medium 4.3 Spinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer builds 0.6%
  • CVE-2021-43832 Critical 10.0 Improper Access Control in spinnaker 2.7%
  • CVE-2021-39143 Medium 6.6 Path Traversal in spinnaker 0.4%