Skip to content
OpenAdvisories

Vendor

spinnaker

9 known vulnerabilities.

Products

spinnaker 9
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.0
    CVE-2023-39348

    Improper log output when using GitHub Status Notifications in spinnaker

    Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always. It's recommended to apply the patch and rotate the GitHub token used for github status notifications. Given that th…

    spinnaker spinnaker github.com/spinnaker/spinnaker Go
  • Medium 4.3
    CVE-2022-23506

    Spinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer builds

    Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes, and Spinnaker's Rosco microservice produces machine images. Rosco prior to versions 1.29.2, 1.28.4, and 1.27.3 does not property mask secrets generated via p…

    spinnaker spinnaker
  • Medium 6.6
    CVE-2021-39143

    Path Traversal in spinnaker

    Spinnaker is an open source, multi-cloud continuous delivery platform. A path traversal vulnerability was discovered in uses of TAR files by AppEngine for deployments. This uses a utility to extract files locally for deployment without validating the paths in…

    spinnaker spinnaker