Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:39:13 +0000 EUVD-2026-292796 https://cve.radiocsirt.org/vuln/euvd-2026-292796 EUVD-2026-292796 https://cve.radiocsirt.org/vuln/euvd-2026-292796 fkie_cve-2026-32604 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32604 <p>Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad actor can execute arbitrary commands very simply on the clouddriver pods. This can expose credentials, remove files, or inject resources easily. Versions 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2 contain a patch. As a workaround, disable the gitrepo artifact types.</p> <p>Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad actor can execute arbitrary commands very simply on the clouddriver pods. This can expose credentials, remove files, or inject resources easily. Versions 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2 contain a patch. As a workaround, disable the gitrepo artifact types.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-32604 GHSA-x3j7-7pgj-h87r — Spinnaker: RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths https://cve.radiocsirt.org/vuln/ghsa-x3j7-7pgj-h87r <p><strong>Affected:</strong> Maven: io.spinnaker.clouddriver:clouddriver-artifacts-gitrepo</p> <p>Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad actor can execute arbitrary commands very simply on the clouddriver pods. This can expose credentials, remove files, or inject resources easily. Versions 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2 contain a patch. As a workaround, disable the gitrepo artifact types.</p> <p><strong>Affected:</strong> Maven: io.spinnaker.clouddriver:clouddriver-artifacts-gitrepo</p> <p>Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad actor can execute arbitrary commands very simply on the clouddriver pods. This can expose credentials, remove files, or inject resources easily. Versions 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2 contain a patch. As a workaround, disable the gitrepo artifact types.</p> https://cve.radiocsirt.org/vuln/ghsa-x3j7-7pgj-h87r