Vulnerabilities in spinnaker
9 resultsCVE-2021-43832CRITICALImproper Access Control in spinnakerEPSS 2.7%CVE-2026-55175HIGHSpinnaker: Improper yaml processing on kustomize bake operationsEPSS 1.1%CVE-2026-44795HIGHSpinnaker: Non-safe yaml deserialization allowing RCE when using specific typesEPSS 1.0%CVE-2026-32604CRITICALSpinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and pathsEPSS 0.6%CVE-2022-23506MEDIUMSpinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer buildsEPSS 0.6%CVE-2026-32613CRITICALSpinnaker vulnerable to RCE via expression parsing due to unrestricted context handlingEPSS 0.6%CVE-2023-39348MEDIUMImproper log output when using GitHub Status Notifications in spinnakerEPSS 0.4%CVE-2021-39143MEDIUMPath Traversal in spinnakerEPSS 0.4%CVE-2025-61916HIGHSpinnaker vulnerable to SSRF due to improper restrictions on http from user inputEPSS 0.2%