spinnaker
Security Risk Profile
77
/100
highSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 28, 2020 to present
6
Total CVEs
5
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
8.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
77/100
high
📈 1 in Last 30 Days
Severity Distribution
Critical
2High
3Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Input Validation
2
2
SSRF
2
3
Code Injection
1
Most Affected Products
1. linuxfoundation Spinnaker12
2. Spinnaker Spinnaker3
3. maven/io.spinnaker.echo:echo-pipelinetriggers3
4. maven/io.spinnaker.clouddriver:clouddriver-artifacts2
5. Spinnaker Echo1
Recent Vulnerabilities
See more →CVE-2026-55175
CVSS 7.5high
Spinnaker: Improper yaml processing on kustomize bake operations
7/10/2026🔧 No Patch
https://reddit.com/r/netsec/comments/1srvol6/two_new_critical_spinnaker_vulns_allow_rce_and/
unknown
Two new critical Spinnaker vulns allow RCE and production access
4/21/2026🔧 No Patch
CVE-2026-32613
CVSS 10.0critical
Spinnaker vulnerable to RCE via expression parsing due to unrestricted context handling
4/20/2026
CVE-2026-32604
CVSS 10.0critical
Spinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths
4/20/2026
CVE-2025-61916
CVSS 7.9high
Spinnaker vulnerable to SSRF due to improper restrictions on http from user input
1/5/2026
CVE-2020-9298
CVSS 7.5high
8/28/2020
Monitor spinnaker in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.