Read the docs

spinnaker

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

spinnaker records in CISA KEV

No spinnaker vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Orca 1 record LOW

Records

10 records

TI-2021-16529 CVE-2021-39143

Path Traversal in spinnaker

Priority MEDIUM 64

Spinnaker is an open source, multi-cloud continuous delivery platform.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00356 Published 2022-01-04 Fixed in 1.26.7, 1.25.7 +1 CWE-22
TI-2021-19638 CVE-2021-43832

Improper Access Control in spinnaker

Priority MEDIUM 54

Spinnaker is an open source, multi-cloud continuous delivery platform.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02655 Published 2022-01-04 Fixed in 1.26.7, 1.25.8 CWE-306
TI-2026-25113 CVE-2026-32604 · GHSA-x3j7-7pgj-h87r

Improper input validation in spinnaker

Priority MEDIUM 44

Spinnaker is an open source, multi-cloud continuous delivery platform.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.00619 Published 2026-04-20 Fixed in 2026.0.1, 2025.4.2 +2 CWE-20
TI-2020-07437 CVE-2020-9298 · GHSA-4fcw-pq4r-f4q7

Server-side request forgery in Netflix Orca Spinnaker

Priority LOW 36

The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01349 Published 2020-08-28 Fixed in 8.7.0 CWE-918
Open these records in search →