VendorsZalandoskipperall versions
Vulnerabilities

Zalando Skipper

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2022-38580
Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
Published 2022-10-24 · Modified
9.81 PoCEPSS 0.115
CVE-2026-23742
Skipper arbitrary code execution through lua filters
Published 2026-01-16 · Analyzed
8.8EPSS 0.005
CVE-2026-24470
Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName
Published 2026-01-26 · Analyzed
8.1EPSS 0.003
CVE-2022-34296
In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.
Published 2022-06-22 · Modified
7.5EPSS 0.012