Vulnerabilities in spinnaker
9 resultsVexday analysis
Spinnaker possui 9 vulnerabilidades registradas, com 3 em nível crítico, mas nenhuma sob exploração ativa conhecida. A fraqueza predominante é validação inadequada de entrada (CWE-20), indicando deficiências em controles de aceitação de dados. O risco atual é moderado, com 2 novas vulnerabilidades publicadas nos últimos 90 dias, sugerindo atenção contínua ao fornecedor.
CVE-2021-43832CRITICALImproper Access Control in spinnakerEPSS 2.6%CVE-2026-55175HIGHSpinnaker: Improper yaml processing on kustomize bake operationsEPSS 0.6%CVE-2026-32604CRITICALSpinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and pathsEPSS 0.6%CVE-2026-32613CRITICALSpinnaker vulnerable to RCE via expression parsing due to unrestricted context handlingEPSS 0.6%CVE-2026-44795HIGHSpinnaker: Non-safe yaml deserialization allowing RCE when using specific typesEPSS 0.5%CVE-2022-23506MEDIUMSpinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer buildsEPSS 0.5%CVE-2021-39143MEDIUMPath Traversal in spinnakerEPSS 0.3%CVE-2023-39348MEDIUMImproper log output when using GitHub Status Notifications in spinnakerEPSS 0.3%CVE-2025-61916HIGHSpinnaker vulnerable to SSRF due to improper restrictions on http from user inputEPSS 0.2%