CyberSecBulletin

Io.spinnaker.orca vulnerabilities

We track 1 vulnerability in Io.spinnaker.orca products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 17, 2026.

1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score

Latest Io.spinnaker.orca vulnerabilities

  • 9.1 Critical severity

    clouddriver-artifacts: Server-Side Request Forgery

    CVE-2026-25534Io.spinnaker.clouddriver

    ### Impact Spinnaker updated URL Validation logic on user input to provide sanitation on user inputted URLs for clouddriver. However, they missed that Java URL objects do not correctly handle underscores on parsing. This led to a bypass of the previous CVE (CV