Product by Zalando
Skipper
10 known vulnerabilities in Skipper (Zalando), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-38580 | Zalando Skipper: Server-Side Request Forgery (SSRF) | 9.8 | |
| High | CVE-2026-65838 | Zalando Skipper: Improper Check for Unusual or Exceptional Conditions | 8.2 | |
| High | CVE-2026-86043 | Zalando Skipper: Incorrect Authorization | 7.5 | |
| High | CVE-2026-50197 | Zalando Skipper: HTTP Request/Response Smuggling | — | |
| High | CVE-2022-34296 | Zalando Skipper: security vulnerability | 7.5 | |
| High | CVE-2026-65604 | Skipper Incomplete Fix for CVE-2026-50197 Policy Bypass | 8.2 | |
| High | CVE-2026-23742 | Skipper arbitrary code execution through lua filters | 8.8 | |
| Medium | CVE-2026-54246 | Skipper routesrv-no-auth: All routesrv API Endpoints Lack Authentication | 5.7 | |
| High | CVE-2026-24470 | Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName | 8.1 | |
| Medium | CVE-2026-54247 | Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS | 4.3 |