io.spinnaker.orca

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

io.spinnaker.orca records in CISA KEV

No io.spinnaker.orca vulnerabilities are listed in CISA KEV.

1 record

TI-2026-20643 CVE-2026-25534 · GHSA-8r8j-gfhg-fw38

LOW 39

### Impact Spinnaker updated URL Validation logic on user input to provide sanitation on user inputted URLs for clouddriver.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00261 Published 2026-03-17 Fixed in 2025.2.4, 2025.3.1 +1 CWE-918