Read the docs
TI-2022-15208 Aliases CVE-2022-34296GHSA-qx2j-85q5-ffp8

In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.

Priority LOW 35Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.

Summary

In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.

Why it matters now

EPSS 0.0115 67th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed github.com/zalando/skipper (Go): 0.13.218

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—github.com/zalando/skipper (Go)before 0.13.2180.13.218Patch availableGHSA-qx2j-85q5-ffp8
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • github.com/zalando/skipper (Go) Vendor— Affected before 0.13.218 Fixed in 0.13.218 Patch available GHSA-qx2j-85q5-ffp8

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:zalando:skipper:*:*:*:*:*:*:*:*before 0.13.218Vulnerablezalando
  • cpe:2.3:a:zalando:skipper:*:*:*:*:*:*:*:* Versions before 0.13.218 Vulnerable ·zalando

Remediation

  • Fix · GHSA-qx2j-85q5-ffp8 github.com/zalando/skipper (Go) Fixed in 0.13.218 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-34296
  2. 2026-10-03 Alias added: GHSA-qx2j-85q5-ffp8

References

Exploit 1

Advisory 1

Other 3

  • TI-2022-18154 Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF). CVSS 3.1CRITICAL 9.8
  • TI-2026-19115 Skipper arbitrary code execution through lua filters CVSS 3.1HIGH 8.8
  • TI-2026-19725 Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName CVSS 3.1HIGH 8.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences