https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:52:09.980896+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-44795 CVE-2026-44795 — Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types 2026-10-06T00:52:10.464792+00:00

Affected: spinnaker

Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to 2026.1.0, 2026.0.3, 2025.4.4, and 2025.3.3, unsafe YAML processing bypasses safe deserialization when using CloudFormation deployments or CloudFoundry baking. The use of a non-safe constructor allows arbitrary loading of Java classes, leading to remote code execution. This issue is fixed in versions 2026.1.0, 2026.0.3, 2025.4.4, and 2025.3.3.