io.spinnaker.rosco:rosco-core vulnerabilities

CVEs whose affected-version data names the io.spinnaker.rosco:rosco-core package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-44795High· 8.5

Spinnaker has uon-safe yaml deserialization, allowing RCE when using specific types

Spinnaker has uon-safe yaml deserialization, allowing RCE when using specific types

▾ Twilightspinnaker · io.spinnaker.rosco:rosco-coreEPSS 1.0%via GHSA

io.spinnaker.rosco:rosco-core vulnerabilities (CVEs) · VulnSea