Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
io.spinnaker.orca:orca-core
io.spinnaker.orca:orca-core vulnerabilities (Maven)
2 vulnerabilities.
io.spinnaker.orca:orca-core
Maven
Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types
CVE-2026-44795
Fix available
8.8
High
June 22, 2026
io.spinnaker.orca:orca-core
Maven
Spinnaker clouddriver and orca URL validation bypass via underscores in hostnames
CVE-2026-25534
Fix available
9.1
Critical
March 16, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open