spinnaker vulnerabilities
9 published CVEs name spinnaker among the affected products.
- Published CVEs
- 9
- Last 12 months
- 5
- Critical
- 3
- Known exploited
- 0
Critical 3High 3Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20222
- 20232
- 20265
Newest CVEs
- CVE-2026-55175
Spinnaker: Improper yaml processing on kustomize bake operations
spinnaker · spinnaker
High7.5 - CVE-2026-44795
Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types
spinnaker · spinnaker
High8.8 - CVE-2026-32613
Spinnaker vulnerable to RCE via expression parsing due to unrestricted context handling
spinnaker · spinnaker
Critical10.0 - CVE-2026-32604
Spinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths
spinnaker · spinnaker
Critical10.0 - CVE-2025-61916
Spinnaker vulnerable to SSRF due to improper restrictions on http from user input
spinnaker · spinnaker
High7.9 - CVE-2023-39348
Improper log output when using GitHub Status Notifications in spinnaker
spinnaker · spinnaker
Medium4.0 - CVE-2022-23506
Spinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer builds
spinnaker · spinnaker
Medium4.3 - CVE-2021-43832
Improper Access Control in spinnaker
spinnaker · spinnaker
Critical10.0 - CVE-2021-39143
Path Traversal in spinnaker
spinnaker · spinnaker
Medium6.6