Login Request a demo
SP
Product
Spinnaker
by Linuxfoundation · last CVE Jul 10, 2026
10
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 3High 5Medium 2Low 0
Severity
All severities10Critical3High5Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Spinnaker to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44795
8.8
1%
Jul 10
Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types
Affected: before 2025.3.3; 2025.4.0 before 2025.4.4; 2026.0.0 before 2026.0.3
CVE-2020-9301
8.8
2%
Dec 11
Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5
Affected: before 1.21.5; 1.22.0 before 1.22.4; 1.23.0 before 1.23.4
CVE-2026-55175
7.5
1%
Jul 10
Spinnaker: Improper yaml processing on kustomize bake operations
Affected: 2025.3.0 before 2025.3.4; 2025.4.0 before 2025.4.4; 2026.0.0 before 2026.0.3; 2026.1.0 before 2026.1.1
CVE-2022-23506
7.5
1%
Jan 3
Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes, and Spinnaker's Rosco microservice produces machine images
Affected: before 1.27.3; 1.28.0 before 1.28.4; 1.29.0 before 1.29.2
CVE-2021-39143
7.1
0%
Jan 4
Spinnaker is an open source, multi-cloud continuous delivery platform
Affected: before 1.24.7; 1.25.0 before 1.25.7; 1.26.0 before 1.26.7
Showing 5