Spinnaker vulnerabilities

Products

• Spinnaker 9

Newest

• linuxfoundation spinnaker Spinnaker: Improper yaml processing on kustomize bake operations CVE-2026-55175 Fix available 7.5 HighJuly 10, 2026
• linuxfoundation spinnaker Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types CVE-2026-44795 Fix available 8.8 HighJune 22, 2026
• linuxfoundation spinnaker Spinnaker vulnerable to RCE via expression parsing due to unrestricted context handling CVE-2026-32613 Fix available 10.0 CriticalApril 20, 2026
• linuxfoundation spinnaker Spinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths CVE-2026-32604 Public exploitFix available 10.0 CriticalApril 20, 2026
• linuxfoundation spinnaker Spinnaker vulnerable to SSRF due to improper restrictions on http from user input CVE-2025-61916 Fix available 7.9 HighJanuary 5, 2026
• linuxfoundation spinnaker Improper log output when using GitHub Status Notifications in spinnaker CVE-2023-39348 Fix available 4.0 MediumAugust 28, 2023
• linuxfoundation spinnaker Spinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer builds CVE-2022-23506 4.3 MediumJanuary 3, 2023
• linuxfoundation spinnaker Improper Access Control in spinnaker CVE-2021-43832 10.0 CriticalJanuary 4, 2022
• linuxfoundation spinnaker Path Traversal in spinnaker CVE-2021-39143 6.6 MediumJanuary 4, 2022
• spinnaker orca Server-Side Request Forgery in Spinnaker Orca CVE-2020-9298 Fix available 7.5 HighAugust 28, 2020