Spinnaker (Linuxfoundation) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 337 known versions, newest CVE from 2026-07-10. Vendor: Linuxfoundation.
CVEs of Spinnaker
- CVE-2026-55175 - CVSS 7.5 (high), 2026-07-10: Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to versions 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4 on their respective…
- CVE-2026-44795 - CVSS 8.8 (high), 2026-07-10: Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to 2026.1.0, 2026.0.3, 2025.4.4, and 2025.3.3, unsafe YAML processing bypasses…
- CVE-2026-32613 - CVSS 10 (critical), 2026-04-20: Spinnaker is an open source, multi-cloud continuous delivery platform. Echo like some other services, uses SPeL (Spring Expression Language) to process…
- CVE-2026-32604 - CVSS 10 (critical), 2026-04-20: Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad actor can…
- CVE-2025-61916 - CVSS 7.9 (high), 2026-01-05: Spinnaker is an open source, multi-cloud continuous delivery platform. Versions prior to 2025.1.6, 2025.2.3, and 2025.3.0 are vulnerable to server-side…
- CVE-2023-39348 - CVSS 5.3 (medium), 2023-08-28: Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always. It's…
- CVE-2022-23506 - CVSS 7.5 (high), 2023-01-03: Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes, and Spinnaker's Rosco microservice produces machine…
- CVE-2021-43832 - CVSS 10 (critical), 2022-01-04: Spinnaker is an open source, multi-cloud continuous delivery platform. Spinnaker has improper permissions allowing pipeline creation & execution. This lets an…
- CVE-2021-39143 - CVSS 7.1 (high), 2022-01-04: Spinnaker is an open source, multi-cloud continuous delivery platform. A path traversal vulnerability was discovered in uses of TAR files by AppEngine for…
- CVE-2020-9301 - CVSS 8.8 (high), 2020-12-11: Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The…
