io.spinnaker.orca:orca-core
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Spinnaker has non-safe yaml deserialization, allowing RCE when using specific types | io.spinnaker.orca:orca-coreio.spinnaker.rosco:rosco-core | Maven | High | Fix reported | |
| Spinnaker clouddriver and orca URL validation bypass via underscores in hostnames | io.spinnaker.clouddriver:clouddriver-artifactsio.spinnaker.orca:orca-core | Maven | Critical | Fix reported |