Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
zalando records in CISA KEVNo zalando vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 77
Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent (OPA) deny-on-presence Rego policies.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.0039 · Published 2026-07-23 · No fix listed CWE-20
Priority HIGH 73
Skipper is an HTTP router and reverse proxy for service composition.
CVSS 4.0HIGH 7.8· Network · No auth · No interaction · EPSS 0.00513 · Published 2026-07-17 · Fixed in 0.26.10 CWE-444
Priority HIGH 72
Skipper is an HTTP router and reverse proxy for service composition.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00451 · Published 2026-09-16 · Fixed in 0.27.37 CWE-863
Priority HIGH 65
Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.15892 · Published 2022-10-24 · Fixed in 0.13.237 CWE-918
Priority MEDIUM 42
Skipper is an HTTP router and reverse proxy for service composition.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00464 · Published 2026-09-14 · Fixed in 0.27.35, 0.27.26 CWE-754
Priority MEDIUM 41
Skipper is an HTTP router and reverse proxy for service composition.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00514 · Published 2026-01-16 · Fixed in 0.23.0 CWE-250
Priority LOW 37
Skipper is an HTTP router and reverse proxy for service composition.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00311 · Published 2026-01-26 · Fixed in 0.24.0 CWE-441
Priority LOW 35
In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0115 · Published 2022-06-22 · Fixed in 0.13.218
Priority LOW 26
Skipper is an HTTP router and reverse proxy for service composition.
CVSS 3.1MEDIUM 5.7· Adjacent network · Low privileges · No interaction · EPSS 0.00338 · Published 2026-09-14 · Fixed in 0.27.13 CWE-306
Priority LOW 20
Skipper is an HTTP router and reverse proxy for service composition.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00298 · Published 2026-09-14 · Fixed in 0.26.22 CWE-770
THREATIST.IORead the docs