Zalando Skipper
10 CVEs affecting Zalando Skipper. Latest disclosed: 2026-09-16. Critical: 1, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-38580 | Critical | 9.8 | 2022-10-25 | Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF). |
CVE-2026-23742 | High | 8.8 | 2026-01-16 | Skipper is an HTTP router and reverse proxy for service composition. The default skipper configuration before 0.23.0 was -lua-sources=inline,file. The problem… |
CVE-2026-65838 | High | 8.2 | 2026-09-14 | Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.35, the opaAuthorizeRequestWithBody filter in filters/openpolicyagent/openpo… |
CVE-2026-65604 | High | 8.2 | 2026-07-23 | Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent (OPA) deny-on-presence Rego policies. When a r… |
CVE-2026-24470 | High | 8.1 | 2026-01-26 | Skipper is an HTTP router and reverse proxy for service composition. Prior to version 0.24.0, when running Skipper as an Ingress controller, users with permiss… |
CVE-2026-86043 | High | 7.5 | 2026-09-16 | Skipper is an HTTP router and reverse proxy for service composition. Prior to version 0.27.37, the opaAuthorizeRequestWithBody filter can authorize an oversize… |
CVE-2022-34296 | High | 7.5 | 2022-06-23 | In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request. |
CVE-2026-54246 | Medium | 5.7 | 2026-09-14 | Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.13, the routesrv component serves cluster-wide control-plane data without ap… |
CVE-2026-54247 | Medium | 4.3 | 2026-09-14 | Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.22, Handler in dataclients/kubernetes/admission/admission.go passes the body… |
CVE-2026-50197 | | 2026-07-17 | Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-… |