Skip to content
OpenAdvisories

Vendor

spinnaker

9 known vulnerabilities.

Products

spinnaker 9
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-55175

    Spinnaker: Improper yaml processing on kustomize bake operations

    Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to versions 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4 on their respective release lines, Kustomize bake operations allow unsafe YAML tag processing in rosco manifests. This can lead…

    spinnaker spinnaker io.spinnaker.rosco:rosco-manifests Maven
  • High 8.8
    CVE-2026-44795

    Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types

    Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to 2026.1.0, 2026.0.3, 2025.4.4, and 2025.3.3, unsafe YAML processing bypasses safe deserialization when using CloudFormation deployments or CloudFoundry baking. The use of a non-saf…

    spinnaker spinnaker io.spinnaker.orca:orca-core io.spinnaker.rosco:rosco-core Maven
  • High 7.9
    CVE-2025-61916

    Spinnaker vulnerable to SSRF due to improper restrictions on http from user input

    Spinnaker is an open source, multi-cloud continuous delivery platform. Versions prior to 2025.1.6, 2025.2.3, and 2025.3.0 are vulnerable to server-side request forgery. The primary impact is allowing users to fetch data from a remote URL. This data can be the…

    spinnaker spinnaker io.spinnaker.clouddriver:clouddriver-artifacts Maven