Skip to content
OpenAdvisories

Package · Maven

io.spinnaker.orca:orca-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-44795

    Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types

    Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to 2026.1.0, 2026.0.3, 2025.4.4, and 2025.3.3, unsafe YAML processing bypasses safe deserialization when using CloudFormation deployments or CloudFoundry baking. The use of a non-saf…

    spinnaker spinnaker io.spinnaker.orca:orca-core io.spinnaker.rosco:rosco-core Maven