Read the docs

backstage

Records663All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical58CVSS 9.0–10.0
CVSS high242CVSS 7.0–8.9

Exploited now

backstage records in CISA KEV
TI-2026-33119 TanStack Unspecified Vulnerability Priority CRITICAL 100KEV 2026-05-27TI-2018-10499 Linux Kernel Integer Overflow Vulnerability Priority CRITICAL 93KEV 2026-01-26

Components

Products in the NVD configurations · select one to filter the records
Yocto 114 records MEDIUM Backstage 53 records MEDIUM Nats-server 36 records HIGH Pytorch 31 records HIGH Everest 29 records HIGH Harbor 24 records MEDIUM Containerd 22 records HIGH Magma 22 records MEDIUM

Records

10 records in Spinnaker · all components

TI-2021-16529 CVE-2021-39143

Path Traversal in spinnaker

Priority MEDIUM 64

Spinnaker is an open source, multi-cloud continuous delivery platform.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00356 Published 2022-01-04 Fixed in 1.26.7, 1.25.7 +1 CWE-22
TI-2021-19638 CVE-2021-43832

Improper Access Control in spinnaker

Priority MEDIUM 54

Spinnaker is an open source, multi-cloud continuous delivery platform.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02655 Published 2022-01-04 Fixed in 1.26.7, 1.25.8 CWE-306
TI-2026-25113 CVE-2026-32604 · GHSA-x3j7-7pgj-h87r

Improper input validation in spinnaker

Priority MEDIUM 44

Spinnaker is an open source, multi-cloud continuous delivery platform.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.00619 Published 2026-04-20 Fixed in 2026.0.1, 2025.4.2 +2 CWE-20
TI-2020-07440 CVE-2020-9301 · GHSA-mgvh-5mj6-fprr

Deserialization of untrusted data in Netflix Spinnaker

Priority MEDIUM 41

Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01523 Published 2020-12-11 No fix listed CWE-502
Open these records in search →