What’s Vulnerable › Products

spinnaker vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your spinnaker version is affected

Latest spinnaker vulnerabilities

• CVE-2026-55175 — Spinnaker: Improper yaml processing on kustomize bake operations (CVSS 7.5)
• CVE-2026-44795 — Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types (CVSS 8.8)
• CVE-2026-32613 — Spinnaker vulnerable to RCE via expression parsing due to unrestricted context handling (CVSS 9.9)
• CVE-2026-32604 — Spinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths (CVSS 9.9)
• CVE-2025-61916 — Spinnaker vulnerable to SSRF due to improper restrictions on http from user input (CVSS 6.6)
• CVE-2023-39348 — Improper log output when using GitHub Status Notifications in spinnaker (CVSS 5.3)
• CVE-2022-23506 — Spinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer builds (CVSS 7.5)
• CVE-2021-43832 — Improper Access Control in spinnaker (CVSS 9.8)
• CVE-2021-39143 — Path Traversal in spinnaker (CVSS 7.1)
• CVE-2020-9301 — (CVSS 8.8)