Skip to content
OpenAdvisories

Package · Go

github.com/zalando/skipper

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-54247

    Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS

    Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.22, Handler in dataclients/kubernetes/admission/admission.go passes the body of requests to the Kubernetes admission endpoint at :9443/admission directly to io.ReadAll(r.Body) …

    zalando skipper github.com/zalando/skipper Go
  • Medium 5.7
    CVE-2026-54246

    Skipper routesrv-no-auth: All routesrv API Endpoints Lack Authentication

    Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.13, the routesrv component serves cluster-wide control-plane data without application-layer authentication through /routes, /routes/{zone}, /swarm/redis/shards, and /swarm/valk…

    zalando skipper github.com/zalando/skipper Go