Remote Code Execution (RCE)

Spinnaker is vulnerable to remote code execution RCE. The vulnerability is due to unsafe processing of YAML tags during Kustomize bake operations, which allows an attacker to execute arbitrary code remotely on Rosco pods when a Kustomize bake operation is performed...

io.spinnaker.rosco:rosco-web (main-272) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-272)

io.spinnaker.rosco:rosco-manifests MAVEN version main-272 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-272 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-274) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-274)

io.spinnaker.rosco:rosco-manifests MAVEN version main-274 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-274 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-277) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-277)

io.spinnaker.rosco:rosco-manifests MAVEN version main-277 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-277 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-282) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-282)

io.spinnaker.rosco:rosco-manifests MAVEN version main-282 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-282 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-283) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-283)

io.spinnaker.rosco:rosco-manifests MAVEN version main-283 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-283 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-284) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-284)

io.spinnaker.rosco:rosco-manifests MAVEN version main-284 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-284 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-288) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-288)

io.spinnaker.rosco:rosco-manifests MAVEN version main-288 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-288 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-289) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-289)

io.spinnaker.rosco:rosco-manifests MAVEN version main-289 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-289 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-293) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-293)

io.spinnaker.rosco:rosco-manifests MAVEN version main-293 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-293 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-301) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-301)

io.spinnaker.rosco:rosco-manifests MAVEN version main-301 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-301 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-304) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-304)

io.spinnaker.rosco:rosco-manifests MAVEN version main-304 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-304 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-309) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-309)

io.spinnaker.rosco:rosco-manifests MAVEN version main-309 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-309 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-310) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-310)

io.spinnaker.rosco:rosco-manifests MAVEN version main-310 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-310 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-312) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-312)

io.spinnaker.rosco:rosco-manifests MAVEN version main-312 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-312 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-318) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-318)

io.spinnaker.rosco:rosco-manifests MAVEN version main-318 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-318 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-322) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-322)

io.spinnaker.rosco:rosco-manifests MAVEN version main-322 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-322 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-323) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-323)

io.spinnaker.rosco:rosco-manifests MAVEN version main-323 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-323 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-324) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-324)

io.spinnaker.rosco:rosco-manifests MAVEN version main-324 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-324 Source cves: CVE-2026-55175 Source advisory:...

io.spinnaker.rosco:rosco-web (main-325) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-325)

io.spinnaker.rosco:rosco-manifests MAVEN version main-325 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-325 Source cves: CVE-2026-55175 Source advisory:...