CVE-2026-44795

Source
https://cve.org/CVERecord?id=CVE-2026-44795
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-44795.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-44795
Aliases
Published
2026-07-10T21:49:27.287Z
Modified
2026-07-23T08:25:12.273891Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types
Details

Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to 2026.1.0, 2026.0.3, 2025.4.4, and 2025.3.3, unsafe YAML processing bypasses safe deserialization when using CloudFormation deployments or CloudFoundry baking. The use of a non-safe constructor allows arbitrary loading of Java classes, leading to remote code execution. This issue is fixed in versions 2026.1.0, 2026.0.3, 2025.4.4, and 2025.3.3.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44795.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-470",
        "CWE-502"
    ]
}
References

Affected packages

Git / github.com/spinnaker/spinnaker

Affected ranges

Type
GIT
Repo
https://github.com/spinnaker/spinnaker
Events
Database specific
{
    "cpe": "cpe:2.3:a:linuxfoundation:spinnaker:*:*:*:*:*:*:*:*",
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2025.3.3"
        },
        {
            "introduced": "2025.4.0"
        },
        {
            "fixed": "2025.4.4"
        },
        {
            "introduced": "2026.0.0"
        },
        {
            "fixed": "2026.0.3"
        }
    ]
}

Affected versions

bn-clouddriver-release-2025.*
bn-clouddriver-release-2025.4.x-10
bn-clouddriver-release-2026.*
bn-clouddriver-release-2026.0.x-8
Other
bn-deck-kayenta-main-2
clouddriver-main-10
clouddriver-main-100
clouddriver-main-101
clouddriver-main-102
clouddriver-main-103
clouddriver-main-104
clouddriver-main-105
clouddriver-main-106
clouddriver-main-107
clouddriver-main-108
clouddriver-main-109
clouddriver-main-11
clouddriver-main-110
clouddriver-main-111
clouddriver-main-112
clouddriver-main-113
clouddriver-main-114
clouddriver-main-115
clouddriver-main-12
clouddriver-main-13
clouddriver-main-14
clouddriver-main-15
clouddriver-main-16
clouddriver-main-17
clouddriver-main-18
clouddriver-main-19
clouddriver-main-2
clouddriver-main-20
clouddriver-main-21
clouddriver-main-22
clouddriver-main-23
clouddriver-main-24
clouddriver-main-25
clouddriver-main-26
clouddriver-main-27
clouddriver-main-28
clouddriver-main-29
clouddriver-main-3
clouddriver-main-30
clouddriver-main-31
clouddriver-main-32
clouddriver-main-33
clouddriver-main-34
clouddriver-main-35
clouddriver-main-36
clouddriver-main-37
clouddriver-main-38
clouddriver-main-39
clouddriver-main-4
clouddriver-main-40
clouddriver-main-41
clouddriver-main-42
clouddriver-main-43
clouddriver-main-44
clouddriver-main-45
clouddriver-main-46
clouddriver-main-47
clouddriver-main-49
clouddriver-main-5
clouddriver-main-50
clouddriver-main-51
clouddriver-main-52
clouddriver-main-53
clouddriver-main-54
clouddriver-main-55
clouddriver-main-56
clouddriver-main-57
clouddriver-main-6
clouddriver-main-60
clouddriver-main-61
clouddriver-main-62
clouddriver-main-7
clouddriver-main-72
clouddriver-main-73
clouddriver-main-74
clouddriver-main-75
clouddriver-main-76
clouddriver-main-77
clouddriver-main-78
clouddriver-main-79
clouddriver-main-8
clouddriver-main-80
clouddriver-main-81
clouddriver-main-82
clouddriver-main-83
clouddriver-main-84
clouddriver-main-85
clouddriver-main-86
clouddriver-main-9
clouddriver-main-98
clouddriver-main-99
deck-kayenta-main-2
deck-main-2
deck-main-3
echo-main-1
echo-main-10
echo-main-11
echo-main-12
echo-main-13
echo-main-14
echo-main-15
echo-main-16
echo-main-17
echo-main-18
echo-main-19
echo-main-2
echo-main-20
echo-main-21
echo-main-22
echo-main-23
echo-main-24
echo-main-25
echo-main-26
echo-main-27
echo-main-28
echo-main-29
echo-main-3
echo-main-30
echo-main-31
echo-main-32
echo-main-33
echo-main-34
echo-main-37
echo-main-38
echo-main-39
echo-main-4
echo-main-40
echo-main-41
echo-main-42
echo-main-43
echo-main-44
echo-main-45
echo-main-46
echo-main-47
echo-main-48
echo-main-49
echo-main-5
echo-main-50
echo-main-51
echo-main-52
echo-main-53
echo-main-54
echo-main-55
echo-main-6
echo-main-64
echo-main-65
echo-main-66
echo-main-67
echo-main-68
echo-main-69
echo-main-7
echo-main-70
echo-main-71
echo-main-72
echo-main-73
echo-main-74
echo-main-75
echo-main-76
echo-main-77
echo-main-78
echo-main-8
fiat-main-1
fiat-main-10
fiat-main-11
fiat-main-12
fiat-main-13
fiat-main-14
fiat-main-15
fiat-main-16
fiat-main-17
fiat-main-18
fiat-main-19
fiat-main-2
fiat-main-20
fiat-main-21
fiat-main-22
fiat-main-23
fiat-main-24
fiat-main-25
fiat-main-26
fiat-main-27
fiat-main-3
fiat-main-30
fiat-main-31
fiat-main-32
fiat-main-33
fiat-main-34
fiat-main-35
fiat-main-36
fiat-main-37
fiat-main-38
fiat-main-39
fiat-main-4
fiat-main-40
fiat-main-41
fiat-main-42
fiat-main-43
fiat-main-44
fiat-main-45
fiat-main-46
fiat-main-5
fiat-main-54
fiat-main-55
fiat-main-56
fiat-main-57
fiat-main-58
fiat-main-59
fiat-main-6
fiat-main-60
fiat-main-61
fiat-main-62
fiat-main-63
fiat-main-64
fiat-main-65
fiat-main-66
fiat-main-67
fiat-main-8
fiat-main-9
front50-main-1
front50-main-10
front50-main-11
front50-main-12
front50-main-13
front50-main-14
front50-main-15
front50-main-16
front50-main-17
front50-main-18
front50-main-19
front50-main-2
front50-main-20
front50-main-21
front50-main-22
front50-main-23
front50-main-24
front50-main-25
front50-main-26
front50-main-27
front50-main-28
front50-main-29
front50-main-3
front50-main-30
front50-main-31
front50-main-34
front50-main-35
front50-main-36
front50-main-37
front50-main-38
front50-main-39
front50-main-4
front50-main-40
front50-main-41
front50-main-42
front50-main-43
front50-main-44
front50-main-45
front50-main-46
front50-main-47
front50-main-48
front50-main-49
front50-main-5
front50-main-50
front50-main-58
front50-main-59
front50-main-6
front50-main-60
front50-main-61
front50-main-62
front50-main-63
front50-main-64
front50-main-65
front50-main-66
front50-main-67
front50-main-68
front50-main-69
front50-main-70
front50-main-71
front50-main-8
front50-main-9
gate-main-1
gate-main-10
gate-main-100
gate-main-101
gate-main-102
gate-main-103
gate-main-104
gate-main-11
gate-main-12
gate-main-13
gate-main-14
gate-main-15
gate-main-16
gate-main-17
gate-main-18
gate-main-19
gate-main-2
gate-main-20
gate-main-21
gate-main-22
gate-main-23
gate-main-24
gate-main-25
gate-main-26
gate-main-27
gate-main-28
gate-main-29
gate-main-3
gate-main-30
gate-main-31
gate-main-32
gate-main-33
gate-main-34
gate-main-35
gate-main-36
gate-main-37
gate-main-38
gate-main-39
gate-main-4
gate-main-40
gate-main-41
gate-main-42
gate-main-46
gate-main-47
gate-main-48
gate-main-49
gate-main-5
gate-main-50
gate-main-51
gate-main-52
gate-main-53
gate-main-54
gate-main-55
gate-main-56
gate-main-57
gate-main-58
gate-main-59
gate-main-6
gate-main-60
gate-main-61
gate-main-62
gate-main-63
gate-main-64
gate-main-65
gate-main-66
gate-main-67
gate-main-68
gate-main-69
gate-main-70
gate-main-71
gate-main-8
gate-main-9
gate-main-90
gate-main-91
gate-main-92
gate-main-93
gate-main-94
gate-main-95
gate-main-96
gate-main-97
gate-main-98
gate-main-99
halyard-main-1
halyard-main-10
halyard-main-105
halyard-main-106
halyard-main-107
halyard-main-108
halyard-main-109
halyard-main-11
halyard-main-110
halyard-main-111
halyard-main-112
halyard-main-113
halyard-main-114
halyard-main-115
halyard-main-116
halyard-main-117
halyard-main-118
halyard-main-119
halyard-main-12
halyard-main-120
halyard-main-121
halyard-main-122
halyard-main-123
halyard-main-124
halyard-main-125
halyard-main-13
halyard-main-14
halyard-main-15
halyard-main-16
halyard-main-17
halyard-main-18
halyard-main-19
halyard-main-2
halyard-main-20
halyard-main-21
halyard-main-22
halyard-main-23
halyard-main-24
halyard-main-25
halyard-main-26
halyard-main-27
halyard-main-28
halyard-main-29
halyard-main-3
halyard-main-30
halyard-main-31
halyard-main-32
halyard-main-33
halyard-main-34
halyard-main-35
halyard-main-36
halyard-main-37
halyard-main-38
halyard-main-39
halyard-main-4
halyard-main-40
halyard-main-41
halyard-main-42
halyard-main-43
halyard-main-44
halyard-main-45
halyard-main-46
halyard-main-47
halyard-main-48
halyard-main-49
halyard-main-5
halyard-main-50
halyard-main-52
halyard-main-53
halyard-main-54
halyard-main-55
halyard-main-56
halyard-main-57
halyard-main-58
halyard-main-59
halyard-main-6
halyard-main-60
halyard-main-61
halyard-main-62
halyard-main-65
halyard-main-66
halyard-main-67
halyard-main-68
halyard-main-69
halyard-main-7
halyard-main-70
halyard-main-71
halyard-main-72
halyard-main-73
halyard-main-74
halyard-main-75
halyard-main-76
halyard-main-77
halyard-main-78
halyard-main-79
halyard-main-8
halyard-main-80
halyard-main-81
halyard-main-82
halyard-main-83
halyard-main-84
halyard-main-85
halyard-main-86
halyard-main-87
halyard-main-88
halyard-main-89
halyard-main-90
halyard-main-91
halyard-main-92
halyard-main-93
igor-main-1
igor-main-10
igor-main-11
igor-main-12
igor-main-13
igor-main-14
igor-main-15
igor-main-16
igor-main-17
igor-main-18
igor-main-19
igor-main-2
igor-main-20
igor-main-21
igor-main-22
igor-main-23
igor-main-24
igor-main-25
igor-main-26
igor-main-27
igor-main-28
igor-main-29
igor-main-3
igor-main-30
igor-main-31
igor-main-32
igor-main-33
igor-main-36
igor-main-37
igor-main-38
igor-main-39
igor-main-4
igor-main-41
igor-main-42
igor-main-43
igor-main-44
igor-main-45
igor-main-46
igor-main-47
igor-main-48
igor-main-49
igor-main-5
igor-main-50
igor-main-51
igor-main-52
igor-main-53
igor-main-54
igor-main-6
igor-main-63
igor-main-64
igor-main-65
igor-main-66
igor-main-67
igor-main-68
igor-main-69
igor-main-70
igor-main-71
igor-main-72
igor-main-73
igor-main-74
igor-main-75
igor-main-76
igor-main-77
igor-main-8
kayenta-main-1
kayenta-main-10
kayenta-main-101
kayenta-main-102
kayenta-main-103
kayenta-main-104
kayenta-main-105
kayenta-main-106
kayenta-main-107
kayenta-main-108
kayenta-main-109
kayenta-main-11
kayenta-main-110
kayenta-main-111
kayenta-main-112
kayenta-main-113
kayenta-main-114
kayenta-main-115
kayenta-main-116
kayenta-main-12
kayenta-main-13
kayenta-main-14
kayenta-main-15
kayenta-main-16
kayenta-main-17
kayenta-main-18
kayenta-main-19
kayenta-main-2
kayenta-main-20
kayenta-main-21
kayenta-main-22
kayenta-main-23
kayenta-main-24
kayenta-main-25
kayenta-main-26
kayenta-main-27
kayenta-main-28
kayenta-main-29
kayenta-main-3
kayenta-main-30
kayenta-main-31
kayenta-main-32
kayenta-main-33
kayenta-main-34
kayenta-main-35
kayenta-main-36
kayenta-main-37
kayenta-main-38
kayenta-main-39
kayenta-main-4
kayenta-main-40
kayenta-main-41
kayenta-main-42
kayenta-main-43
kayenta-main-44
kayenta-main-45
kayenta-main-46
kayenta-main-47
kayenta-main-48
kayenta-main-49
kayenta-main-5
kayenta-main-50
kayenta-main-51
kayenta-main-52
kayenta-main-53
kayenta-main-54
kayenta-main-55
kayenta-main-56
kayenta-main-57
kayenta-main-58
kayenta-main-59
kayenta-main-6
kayenta-main-60
kayenta-main-61
kayenta-main-63
kayenta-main-64
kayenta-main-65
kayenta-main-66
kayenta-main-69
kayenta-main-7
kayenta-main-70
kayenta-main-71
kayenta-main-72
kayenta-main-73
kayenta-main-74
kayenta-main-75
kayenta-main-76
kayenta-main-77
kayenta-main-78
kayenta-main-79
kayenta-main-80
kayenta-main-81
kayenta-main-82
kayenta-main-83
kayenta-main-84
kayenta-main-85
kayenta-main-86
kayenta-main-87
kayenta-main-88
kayenta-main-89
kayenta-main-9
kayenta-main-90
kayenta-main-91
kayenta-main-92
kayenta-main-93
keel-main-1
keel-main-10
keel-main-11
keel-main-12
keel-main-13
keel-main-14
keel-main-15
keel-main-16
keel-main-17
keel-main-18
keel-main-19
keel-main-2
keel-main-20
keel-main-21
keel-main-22
keel-main-23
keel-main-24
keel-main-25
keel-main-26
keel-main-27
keel-main-28
keel-main-3
keel-main-31
keel-main-32
keel-main-33
keel-main-34
keel-main-35
keel-main-36
keel-main-37
keel-main-38
keel-main-39
keel-main-4
keel-main-40
keel-main-41
keel-main-42
keel-main-43
keel-main-44
keel-main-45
keel-main-46
keel-main-47
keel-main-5
keel-main-55
keel-main-56
keel-main-57
keel-main-58
keel-main-59
keel-main-6
keel-main-60
keel-main-61
keel-main-62
keel-main-63
keel-main-64
keel-main-65
keel-main-66
keel-main-67
keel-main-68
keel-main-69
keel-main-8
keel-main-9
orca-main-1
orca-main-10
orca-main-100
orca-main-101
orca-main-102
orca-main-103
orca-main-104
orca-main-105
orca-main-106
orca-main-107
orca-main-108
orca-main-109
orca-main-11
orca-main-110
orca-main-111
orca-main-112
orca-main-113
orca-main-12
orca-main-13
orca-main-14
orca-main-15
orca-main-16
orca-main-17
orca-main-18
orca-main-19
orca-main-2
orca-main-20
orca-main-21
orca-main-22
orca-main-23
orca-main-24
orca-main-25
orca-main-26
orca-main-27
orca-main-28
orca-main-3
orca-main-30
orca-main-31
orca-main-32
orca-main-33
orca-main-34
orca-main-35
orca-main-36
orca-main-37
orca-main-38
orca-main-39
orca-main-4
orca-main-40
orca-main-41
orca-main-42
orca-main-43
orca-main-44
orca-main-45
orca-main-46
orca-main-47
orca-main-48
orca-main-49
orca-main-5
orca-main-50
orca-main-51
orca-main-52
orca-main-53
orca-main-54
orca-main-55
orca-main-56
orca-main-57
orca-main-58
orca-main-59
orca-main-6
orca-main-60
orca-main-62
orca-main-63
orca-main-64
orca-main-65
orca-main-68
orca-main-69
orca-main-7
orca-main-70
orca-main-71
orca-main-72
orca-main-73
orca-main-74
orca-main-75
orca-main-76
orca-main-77
orca-main-78
orca-main-79
orca-main-80
orca-main-81
orca-main-82
orca-main-83
orca-main-84
orca-main-85
orca-main-86
orca-main-87
orca-main-88
orca-main-89
orca-main-9
orca-main-90
orca-main-91
orca-main-99
rosco-main-1
rosco-main-10
rosco-main-11
rosco-main-12
rosco-main-14
rosco-main-15
rosco-main-16
rosco-main-17
rosco-main-18
rosco-main-19
rosco-main-2
rosco-main-20
rosco-main-21
rosco-main-22
rosco-main-23
rosco-main-24
rosco-main-26
rosco-main-27
rosco-main-3
rosco-main-30
rosco-main-31
rosco-main-32
rosco-main-33
rosco-main-34
rosco-main-36
rosco-main-37
rosco-main-38
rosco-main-39
rosco-main-4
rosco-main-40
rosco-main-41
rosco-main-42
rosco-main-43
rosco-main-44
rosco-main-45
rosco-main-46
rosco-main-47
rosco-main-48
rosco-main-5
rosco-main-56
rosco-main-57
rosco-main-58
rosco-main-59
rosco-main-6
rosco-main-60
rosco-main-61
rosco-main-62
rosco-main-63
rosco-main-64
rosco-main-65
rosco-main-66
rosco-main-67
rosco-main-68
rosco-main-69
rosco-main-8
rosco-main-9
bn-deck-kayenta-release-2025.*
bn-deck-kayenta-release-2025.0.x-0
bn-deck-kayenta-release-2025.1.x-0
bn-deck-kayenta-release-2025.3.x-6
bn-deck-kayenta-release-2025.4.x-6
bn-deck-kayenta-release-2026.*
bn-deck-kayenta-release-2026.0.x-1
bn-deck-release-2025.*
bn-deck-release-2025.0.x-0
bn-deck-release-2025.1.x-0
bn-deck-release-2025.4.x-5
bn-deck-release-2026.*
bn-deck-release-2026.0.x-1
bn-fiat-release-2025.*
bn-fiat-release-2025.2.x-0
bn-fiat-release-2025.3.x-2
bn-fiat-release-2025.4.x-4
bn-fiat-release-2026.*
bn-fiat-release-2026.0.x-4
bn-front50-release-2025.*
bn-front50-release-2025.2.x-0
bn-front50-release-2025.3.x-2
bn-front50-release-2025.4.x-4
bn-front50-release-2026.*
bn-front50-release-2026.0.x-4
bn-gate-release-2025.*
bn-gate-release-2025.4.x-9
bn-gate-release-2026.*
bn-gate-release-2026.0.x-10
bn-halyard-release-2025.*
bn-halyard-release-2025.4.x-11
bn-halyard-release-2026.*
bn-halyard-release-2026.0.x-8
bn-igor-release-2025.*
bn-igor-release-2025.2.x-0
bn-igor-release-2025.3.x-2
bn-igor-release-2025.4.x-4
bn-igor-release-2026.*
bn-igor-release-2026.0.x-4
bn-kayenta-release-2025.*
bn-kayenta-release-2025.3.x-3
bn-kayenta-release-2025.4.x-6
bn-kayenta-release-2026.*
bn-kayenta-release-2026.0.x-4
bn-keel-release-2025.*
bn-keel-release-2025.2.x-0
bn-keel-release-2025.3.x-2
bn-keel-release-2025.4.x-4
bn-keel-release-2026.*
bn-keel-release-2026.0.x-4
bn-orca-release-2025.*
bn-orca-release-2025.3.x-3
bn-orca-release-2025.4.x-6
bn-orca-release-2026.*
bn-orca-release-2026.0.x-4
bn-rosco-release-2025.*
bn-rosco-release-2025.2.x-0
bn-rosco-release-2025.4.x-6
bn-rosco-release-2026.*
bn-rosco-release-2026.0.x-6
bn-spin-release-2025.*
bn-spin-release-2025.0.x-0
bn-spin-release-2025.1.x-0
bn-spin-release-2025.2.x-0
bn-spin-release-2025.3.x-3
bn-spin-release-2025.4.x-0
bn-spin-release-2026.*
bn-spin-release-2026.0.x-3
clouddriver-2025.*
clouddriver-2025.0-0
clouddriver-2025.1-0
clouddriver-2025.1.0
clouddriver-2025.2-0
clouddriver-2025.2.0
clouddriver-2025.3-0
clouddriver-2025.3-2
clouddriver-2025.3-3
clouddriver-2025.3-4
clouddriver-2025.3-5
clouddriver-2025.3-6
clouddriver-2025.3-7
clouddriver-2025.3.0
clouddriver-2025.3.1
clouddriver-2025.3.2
clouddriver-2025.4-0
clouddriver-2025.4-1
clouddriver-2025.4-2
clouddriver-2025.4-3
clouddriver-2025.4-4
clouddriver-2025.4-5
clouddriver-2025.4-6
clouddriver-2025.4-7
clouddriver-2025.4-8
clouddriver-2025.4-9
clouddriver-2025.4.0
clouddriver-2025.4.1
clouddriver-2025.4.2
clouddriver-2025.4.3
clouddriver-2026.*
clouddriver-2026.0-0
clouddriver-2026.0-3
clouddriver-2026.0-4
clouddriver-2026.0-5
clouddriver-2026.0-6
clouddriver-2026.0-7
clouddriver-2026.0-8
clouddriver-2026.0.0
clouddriver-2026.0.1
clouddriver-2026.0.2
deck-2025.*
deck-2025.1-0
deck-2025.1.0
deck-2025.2-0
deck-2025.2.0
deck-2025.3-0
deck-2025.3-3
deck-2025.3.0
deck-2025.3.1
deck-2025.3.2
deck-2025.4-0
deck-2025.4-4
deck-2025.4-5
deck-2025.4.0
deck-2025.4.0-rc1
deck-2025.4.1
deck-2025.4.2
deck-2025.4.3
deck-2026.*
deck-2026.0.1
deck-2026.0.2
deck-kayenta-2025.*
deck-kayenta-2025.1-0
deck-kayenta-2025.1.0
deck-kayenta-2025.2-0
deck-kayenta-2025.2.0
deck-kayenta-2025.3-0
deck-kayenta-2025.3.0
deck-kayenta-2025.3.1
deck-kayenta-2025.3.2
deck-kayenta-2025.4-0
deck-kayenta-2025.4.0
deck-kayenta-2025.4.1
deck-kayenta-2025.4.2
deck-kayenta-2025.4.3
deck-kayenta-2026.*
deck-kayenta-2026.0.1
deck-kayenta-2026.0.2
echo-2025.*
echo-2025.0-0
echo-2025.1-0
echo-2025.1.0
echo-2025.2-0
echo-2025.2.0
echo-2025.3-0
echo-2025.3-1
echo-2025.3-2
echo-2025.3-3
echo-2025.3.0
echo-2025.3.1
echo-2025.3.2
echo-2025.4-0
echo-2025.4-1
echo-2025.4-2
echo-2025.4-3
echo-2025.4-4
echo-2025.4-5
echo-2025.4-6
echo-2025.4-7
echo-2025.4.0
echo-2025.4.1
echo-2025.4.2
echo-2025.4.3
echo-2026.*
echo-2026.0-0
echo-2026.0-2
echo-2026.0-3
echo-2026.0-4
echo-2026.0-5
echo-2026.0-6
echo-2026.0-7
echo-2026.0.0
echo-2026.0.1
echo-2026.0.2
fiat-2025.*
fiat-2025.0-0
fiat-2025.1-0
fiat-2025.1.0
fiat-2025.2-0
fiat-2025.2.0
fiat-2025.3-0
fiat-2025.3-1
fiat-2025.3-2
fiat-2025.3.0
fiat-2025.3.1
fiat-2025.3.2
fiat-2025.4-0
fiat-2025.4-1
fiat-2025.4-2
fiat-2025.4-3
fiat-2025.4-4
fiat-2025.4.0
fiat-2025.4.1
fiat-2025.4.2
fiat-2025.4.3
fiat-2026.*
fiat-2026.0-0
fiat-2026.0-2
fiat-2026.0-3
fiat-2026.0-4
fiat-2026.0.0
fiat-2026.0.1
fiat-2026.0.2
front50-2025.*
front50-2025.0-0
front50-2025.1-0
front50-2025.1.0
front50-2025.2-0
front50-2025.2.0
front50-2025.3-0
front50-2025.3-1
front50-2025.3-2
front50-2025.3.0
front50-2025.3.1
front50-2025.3.2
front50-2025.4-0
front50-2025.4-1
front50-2025.4-2
front50-2025.4-3
front50-2025.4-4
front50-2025.4.0
front50-2025.4.1
front50-2025.4.2
front50-2025.4.3
front50-2026.*
front50-2026.0-0
front50-2026.0-2
front50-2026.0-3
front50-2026.0-4
front50-2026.0.0
front50-2026.0.1
front50-2026.0.2
gate-2025.*
gate-2025.0-0
gate-2025.1-0
gate-2025.1.0
gate-2025.2-0
gate-2025.2.0
gate-2025.3-0
gate-2025.3-1
gate-2025.3-2
gate-2025.3.0
gate-2025.3.1
gate-2025.3.2
gate-2025.4-0
gate-2025.4-1
gate-2025.4-2
gate-2025.4-3
gate-2025.4-4
gate-2025.4-5
gate-2025.4-6
gate-2025.4-7
gate-2025.4-8
gate-2025.4-9
gate-2025.4.0
gate-2025.4.1
gate-2025.4.2
gate-2025.4.3
gate-2026.*
gate-2026.0-0
gate-2026.0-10
gate-2026.0-2
gate-2026.0-3
gate-2026.0-4
gate-2026.0-5
gate-2026.0-6
gate-2026.0-7
gate-2026.0-8
gate-2026.0-9
gate-2026.0.0
gate-2026.0.1
gate-2026.0.2
halyard-2025.*
halyard-2025.0-0
halyard-2025.1-0
halyard-2025.1.0
halyard-2025.2-0
halyard-2025.2.0
halyard-2025.3-0
halyard-2025.3-1
halyard-2025.3-2
halyard-2025.3-3
halyard-2025.3-4
halyard-2025.3-5
halyard-2025.3-6
halyard-2025.3-7
halyard-2025.3-8
halyard-2025.3.0
halyard-2025.3.1
halyard-2025.3.2
halyard-2025.4-0
halyard-2025.4-1
halyard-2025.4-10
halyard-2025.4-11
halyard-2025.4-2
halyard-2025.4-3
halyard-2025.4-4
halyard-2025.4-5
halyard-2025.4-6
halyard-2025.4-7
halyard-2025.4-8
halyard-2025.4-9
halyard-2025.4.0
halyard-2025.4.1
halyard-2025.4.2
halyard-2025.4.3
halyard-2026.*
halyard-2026.0-0
halyard-2026.0-3
halyard-2026.0-4
halyard-2026.0-5
halyard-2026.0-6
halyard-2026.0-7
halyard-2026.0-8
halyard-2026.0.0
halyard-2026.0.1
halyard-2026.0.2
igor-2025.*
igor-2025.0-0
igor-2025.1-0
igor-2025.1.0
igor-2025.2-0
igor-2025.2.0
igor-2025.3-0
igor-2025.3-1
igor-2025.3-2
igor-2025.3.0
igor-2025.3.1
igor-2025.3.2
igor-2025.4-0
igor-2025.4-1
igor-2025.4-2
igor-2025.4-3
igor-2025.4-4
igor-2025.4.0
igor-2025.4.1
igor-2025.4.2
igor-2025.4.3
igor-2026.*
igor-2026.0-0
igor-2026.0-2
igor-2026.0-3
igor-2026.0-4
igor-2026.0.0
igor-2026.0.1
igor-2026.0.2
kayenta-2025.*
kayenta-2025.0-0
kayenta-2025.1-0
kayenta-2025.1.0
kayenta-2025.2-0
kayenta-2025.2.0
kayenta-2025.3-0
kayenta-2025.3-1
kayenta-2025.3-2
kayenta-2025.3-3
kayenta-2025.3.0
kayenta-2025.3.1
kayenta-2025.3.2
kayenta-2025.4-0
kayenta-2025.4-1
kayenta-2025.4-2
kayenta-2025.4-3
kayenta-2025.4-4
kayenta-2025.4-5
kayenta-2025.4-6
kayenta-2025.4.0
kayenta-2025.4.1
kayenta-2025.4.2
kayenta-2025.4.3
kayenta-2026.*
kayenta-2026.0-0
kayenta-2026.0-2
kayenta-2026.0-3
kayenta-2026.0-4
kayenta-2026.0.0
kayenta-2026.0.1
kayenta-2026.0.2
keel-2025.*
keel-2025.0-0
keel-2025.1-0
keel-2025.1.0
keel-2025.2-0
keel-2025.2.0
keel-2025.3-0
keel-2025.3-1
keel-2025.3-2
keel-2025.3.0
keel-2025.3.1
keel-2025.3.2
keel-2025.4-0
keel-2025.4-1
keel-2025.4-2
keel-2025.4-3
keel-2025.4-4
keel-2025.4.0
keel-2025.4.1
keel-2025.4.2
keel-2025.4.3
keel-2026.*
keel-2026.0-0
keel-2026.0-2
keel-2026.0-3
keel-2026.0-4
keel-2026.0.0
keel-2026.0.1
keel-2026.0.2
orca-2025.*
orca-2025.0-0
orca-2025.1-0
orca-2025.1.0
orca-2025.2-0
orca-2025.2.0
orca-2025.3-0
orca-2025.3-1
orca-2025.3-2
orca-2025.3-3
orca-2025.3.0
orca-2025.3.1
orca-2025.3.2
orca-2025.4-0
orca-2025.4-1
orca-2025.4-2
orca-2025.4-3
orca-2025.4-4
orca-2025.4-5
orca-2025.4-6
orca-2025.4.0
orca-2025.4.1
orca-2025.4.2
orca-2025.4.3
orca-2026.*
orca-2026.0-0
orca-2026.0-2
orca-2026.0-3
orca-2026.0-4
orca-2026.0.0
orca-2026.0.1
orca-2026.0.2
rosco-2025.*
rosco-2025.0-0
rosco-2025.1-0
rosco-2025.1.0
rosco-2025.2-0
rosco-2025.2.0
rosco-2025.3-0
rosco-2025.3-1
rosco-2025.3-2
rosco-2025.3.0
rosco-2025.3.1
rosco-2025.3.2
rosco-2025.4-1
rosco-2025.4-2
rosco-2025.4-3
rosco-2025.4-4
rosco-2025.4-5
rosco-2025.4-6
rosco-2025.4.0
rosco-2025.4.1
rosco-2025.4.2
rosco-2025.4.3
rosco-2026.*
rosco-2026.0-1
rosco-2026.0-3
rosco-2026.0-4
rosco-2026.0-5
rosco-2026.0-6
rosco-2026.0.0
rosco-2026.0.1
rosco-2026.0.2
spinnaker-release-2024.*
spinnaker-release-2024.0.0
spinnaker-release-2025.*
spinnaker-release-2025.2.0
spinnaker-release-2025.3.0
spinnaker-release-2025.3.1
spinnaker-release-2025.3.2
spinnaker-release-2025.4.0
spinnaker-release-2025.4.1
spinnaker-release-2025.4.2
spinnaker-release-2025.4.3
spinnaker-release-2026.*
spinnaker-release-2026.0.1
spinnaker-release-2026.0.2

Database specific

vanir_signatures_modified
"2026-07-23T08:25:12Z"
vanir_signatures
[
    {
        "id": "CVE-2026-44795-04b581f6",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "235861081448524550697926604541702171869",
                "99102249654533231570508622423869921239",
                "251757546494006564125831041132408452518",
                "53332591767418524109563907695704392423"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "rosco/rosco-manifests/src/main/java/com/netflix/spinnaker/rosco/manifests/cloudfoundry/CloudFoundryBakeManifestService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/f69d7b534d068ed74d0d3a1fbf17e2c945d36e5e",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-06f4457f",
        "signature_version": "v1",
        "digest": {
            "function_hash": "309609728749497497740056303320676429056",
            "length": 157.0
        },
        "signature_type": "Function",
        "target": {
            "function": "cancelTask",
            "file": "gate/gate-core/src/main/java/com/netflix/spinnaker/gate/services/TaskService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/d420f762b6015642b7c2c247d8a6bdb92f0bd16f",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-10847892",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "145977159861078752422517908214440263523",
                "219334290301690256377814569232644423490",
                "215140012079548632696332070938664991577",
                "61774309373613198777276918863459995301",
                "287849326995947547843177935116696304088",
                "213286023091378667019888297516983808305",
                "130085442457277400751525360606417012775",
                "212646138876028943350878337343736100954",
                "168074117912334874262225108830715417558",
                "113672791707020484183159448120831337281"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "gate/gate-core/src/main/java/com/netflix/spinnaker/gate/services/internal/OrcaService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/d420f762b6015642b7c2c247d8a6bdb92f0bd16f",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-23fa8646",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "244506589461995779394654401529488534655",
                "121570560466001706569260388166262418851",
                "172838142966300204985652308539936601967",
                "276137351684269750816761170351526079373",
                "105772944571257849777881259155501516151",
                "244994790853761028810131073412709327545",
                "160830314919003553991753016290327970669",
                "80115661767324399767011065488403237954",
                "259253936780749974120662547335140814286",
                "306016351657702606368706544303061240679"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "orca/orca-clouddriver/src/main/java/com/netflix/spinnaker/orca/clouddriver/tasks/providers/aws/cloudformation/DeployCloudFormationTask.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/f69d7b534d068ed74d0d3a1fbf17e2c945d36e5e",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-2f2f4af4",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "273353365481417993843249895730102653382",
                "205629369283818576291748270701353419136",
                "289306276140895576365782504652196524789",
                "71680636402484649148626871985715212652"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "kork/kork-secrets/src/main/java/com/netflix/spinnaker/kork/secrets/engines/AbstractStorageSecretEngine.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/f69d7b534d068ed74d0d3a1fbf17e2c945d36e5e",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-30d08785",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "244633496895136005442836876144781901820",
                "206302747532622533576234231040268710572",
                "128278766332575750607569768817968144535",
                "95309825138370142821100055205479463873",
                "218073788644275385008463977609925117310",
                "6901424306799913360115441728579596802",
                "248487712364652700010936059692042870386",
                "330774764828865647048286892483185859981",
                "41958492924561858641171244247636884672",
                "166897440502892873621557629105832499466",
                "248020905971105383013141147509514925722",
                "85472008688813742733722193308220806729",
                "221912900417812847992683706901703459260",
                "146413335609183899869208775653824925953",
                "36812818217537956144955015424067008377",
                "334702862094881414077615049126051044476",
                "294368463313409695084634269491421804413",
                "121586338170095282969135356876099859999",
                "202782517570665297713925782494177814630",
                "26870044841817964154308851863592343247",
                "201196223469080516509778026785259274918",
                "269807236269945061561060669326014467624",
                "321441600043239541239886146284561854964",
                "298015502829155290351066687640833141377",
                "278059341685921561639097824148104746476",
                "96687546197617546295344083797077898908",
                "156791970464637933020050584601314972017",
                "311197930335111127392009027251836286829",
                "200068453137501003138442065826282209644",
                "105357940203201968610768961660597512422",
                "146258211800874396243154003951838427197",
                "195343798575061699246385885897669856249",
                "132130660711928510752039486935310324785",
                "36135999705064282932147747083357424926",
                "133745902580411638395115118304691982288",
                "296963025332414878724968891317695007417",
                "50333526524660594606621778476486571969",
                "12968256925246022615136072548453879600",
                "75496682968427887292487410987497222614"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/5aec138dee89abaeecfa782f0bd8b5bdf16d9a55",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-6350f0bc",
        "signature_version": "v1",
        "digest": {
            "function_hash": "319941362171852552849423740976728879728",
            "length": 263.0
        },
        "signature_type": "Function",
        "target": {
            "function": "newYaml",
            "file": "kork/kork-core/src/main/java/com/netflix/spinnaker/kork/yaml/YamlHelper.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/4cbe1d5fea9df573aadfd8b093fb4b594b354ee5",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-7daf35c6",
        "signature_version": "v1",
        "digest": {
            "function_hash": "234966233154666068892167148775950461773",
            "length": 467.0
        },
        "signature_type": "Function",
        "target": {
            "function": "sendMessage",
            "file": "echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/9e97bec69d0f8c2e8471276fa79eab88f0536925",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-8295c13c",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "273353365481417993843249895730102653382",
                "205629369283818576291748270701353419136",
                "289306276140895576365782504652196524789",
                "71680636402484649148626871985715212652"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "kork/kork-secrets/src/main/java/com/netflix/spinnaker/kork/secrets/engines/AbstractStorageSecretEngine.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/4cbe1d5fea9df573aadfd8b093fb4b594b354ee5",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-8e374697",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "246226563571738667109527729182909737155",
                "138500072527149236310798805776886579496",
                "238518080540978553302133668678076545891",
                "101127717506438323873532387271031616993",
                "12161192250156353663658742715771294638",
                "316203441114325929402541876384413571570",
                "245578833039157659393331682037753170278",
                "233480048431282752529346361210789914594",
                "248507262279958068398034929223054075576"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "kork/kork-core/src/main/java/com/netflix/spinnaker/kork/yaml/YamlHelper.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/4cbe1d5fea9df573aadfd8b093fb4b594b354ee5",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-910e0f54",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "235861081448524550697926604541702171869",
                "99102249654533231570508622423869921239",
                "251757546494006564125831041132408452518",
                "53332591767418524109563907695704392423"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "rosco/rosco-manifests/src/main/java/com/netflix/spinnaker/rosco/manifests/cloudfoundry/CloudFoundryBakeManifestService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/e57c0db4584b398473a7bbb19402ce6c1e89b627",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-9e66cdd1",
        "signature_version": "v1",
        "digest": {
            "function_hash": "121417669775055737212415030206987356174",
            "length": 392.0
        },
        "signature_type": "Function",
        "target": {
            "function": "getRelativePath",
            "file": "echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/5aec138dee89abaeecfa782f0bd8b5bdf16d9a55",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-a0ee8d31",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "329441297168006195216984697805825776667",
                "72860938043372452984936103254394934133",
                "253770407885699064987122572715255690282",
                "194348121243043461055789618435549264370",
                "211623859517572629360176830335795037194",
                "320075850525215119965724928999485517699",
                "194606367712447319350602445672209769967"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsClient.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/5aec138dee89abaeecfa782f0bd8b5bdf16d9a55",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-a1b81ff7",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "244506589461995779394654401529488534655",
                "121570560466001706569260388166262418851",
                "172838142966300204985652308539936601967",
                "276137351684269750816761170351526079373",
                "105772944571257849777881259155501516151",
                "244994790853761028810131073412709327545",
                "160830314919003553991753016290327970669",
                "80115661767324399767011065488403237954",
                "259253936780749974120662547335140814286",
                "306016351657702606368706544303061240679"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "orca/orca-clouddriver/src/main/java/com/netflix/spinnaker/orca/clouddriver/tasks/providers/aws/cloudformation/DeployCloudFormationTask.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/e57c0db4584b398473a7bbb19402ce6c1e89b627",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-a378ac59",
        "signature_version": "v1",
        "digest": {
            "function_hash": "299738937526561233945522115545940002237",
            "length": 169.0
        },
        "signature_type": "Function",
        "target": {
            "function": "cancelTasks",
            "file": "gate/gate-core/src/main/java/com/netflix/spinnaker/gate/services/TaskService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/d420f762b6015642b7c2c247d8a6bdb92f0bd16f",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-a9758c95",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "329441297168006195216984697805825776667",
                "72860938043372452984936103254394934133",
                "253770407885699064987122572715255690282",
                "194348121243043461055789618435549264370",
                "211623859517572629360176830335795037194",
                "320075850525215119965724928999485517699",
                "194606367712447319350602445672209769967"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsClient.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/9e97bec69d0f8c2e8471276fa79eab88f0536925",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-abf999d0",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "235861081448524550697926604541702171869",
                "99102249654533231570508622423869921239",
                "251757546494006564125831041132408452518",
                "53332591767418524109563907695704392423"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "rosco/rosco-manifests/src/main/java/com/netflix/spinnaker/rosco/manifests/cloudfoundry/CloudFoundryBakeManifestService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/4cbe1d5fea9df573aadfd8b093fb4b594b354ee5",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-aefd449a",
        "signature_version": "v1",
        "digest": {
            "function_hash": "268594087600164205175137647801368699510",
            "length": 267.0
        },
        "signature_type": "Function",
        "target": {
            "function": "newYaml",
            "file": "kork/kork-core/src/main/java/com/netflix/spinnaker/kork/yaml/YamlHelper.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/f69d7b534d068ed74d0d3a1fbf17e2c945d36e5e",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-c2438890",
        "signature_version": "v1",
        "digest": {
            "function_hash": "234966233154666068892167148775950461773",
            "length": 467.0
        },
        "signature_type": "Function",
        "target": {
            "function": "sendMessage",
            "file": "echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/5aec138dee89abaeecfa782f0bd8b5bdf16d9a55",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-e0d45cb9",
        "signature_version": "v1",
        "digest": {
            "function_hash": "38920186073802880304536263724044794029",
            "length": 152.0
        },
        "signature_type": "Function",
        "target": {
            "function": "deleteTask",
            "file": "gate/gate-core/src/main/java/com/netflix/spinnaker/gate/services/TaskService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/d420f762b6015642b7c2c247d8a6bdb92f0bd16f",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-e14e5cf3",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "244633496895136005442836876144781901820",
                "206302747532622533576234231040268710572",
                "128278766332575750607569768817968144535",
                "95309825138370142821100055205479463873",
                "218073788644275385008463977609925117310",
                "6901424306799913360115441728579596802",
                "248487712364652700010936059692042870386",
                "330774764828865647048286892483185859981",
                "41958492924561858641171244247636884672",
                "166897440502892873621557629105832499466",
                "248020905971105383013141147509514925722",
                "85472008688813742733722193308220806729",
                "221912900417812847992683706901703459260",
                "146413335609183899869208775653824925953",
                "36812818217537956144955015424067008377",
                "334702862094881414077615049126051044476",
                "294368463313409695084634269491421804413",
                "121586338170095282969135356876099859999",
                "202782517570665297713925782494177814630",
                "26870044841817964154308851863592343247",
                "201196223469080516509778026785259274918",
                "269807236269945061561060669326014467624",
                "321441600043239541239886146284561854964",
                "298015502829155290351066687640833141377",
                "278059341685921561639097824148104746476",
                "96687546197617546295344083797077898908",
                "156791970464637933020050584601314972017",
                "311197930335111127392009027251836286829",
                "200068453137501003138442065826282209644",
                "105357940203201968610768961660597512422",
                "146258211800874396243154003951838427197",
                "195343798575061699246385885897669856249",
                "132130660711928510752039486935310324785",
                "36135999705064282932147747083357424926",
                "133745902580411638395115118304691982288",
                "296963025332414878724968891317695007417",
                "50333526524660594606621778476486571969",
                "12968256925246022615136072548453879600",
                "75496682968427887292487410987497222614"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/9e97bec69d0f8c2e8471276fa79eab88f0536925",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-e52185d3",
        "signature_version": "v1",
        "digest": {
            "function_hash": "319941362171852552849423740976728879728",
            "length": 263.0
        },
        "signature_type": "Function",
        "target": {
            "function": "newYaml",
            "file": "kork/kork-core/src/main/java/com/netflix/spinnaker/kork/yaml/YamlHelper.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/e57c0db4584b398473a7bbb19402ce6c1e89b627",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-eab2f733",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "246226563571738667109527729182909737155",
                "138500072527149236310798805776886579496",
                "238518080540978553302133668678076545891",
                "101127717506438323873532387271031616993",
                "12161192250156353663658742715771294638",
                "316203441114325929402541876384413571570",
                "245578833039157659393331682037753170278",
                "233480048431282752529346361210789914594",
                "248507262279958068398034929223054075576"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "kork/kork-core/src/main/java/com/netflix/spinnaker/kork/yaml/YamlHelper.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/e57c0db4584b398473a7bbb19402ce6c1e89b627",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-eb118a10",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "80776093172926907057771851191562519052",
                "29501970717603343185220224071939175498",
                "282022434576369321762038396188700362102",
                "24866947706278230333184356476321684382",
                "213199930756987070659744743604313925543",
                "215044875244769665493177242617590409341",
                "254803161717938538411099768167598312007",
                "39765002931838537595915705602454191680",
                "43929410957432650528900926936687785626",
                "151949365048258061600018090558349683594",
                "174261883715916514654239006776664789591",
                "289168747844611864843674478993262438672",
                "73917618769608385353319882414616626341",
                "233522396146483124302473427042278672015",
                "114371187083768750357973937425840728642",
                "284617178230947834292221497295578039257"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "gate/gate-core/src/main/java/com/netflix/spinnaker/gate/services/TaskService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/d420f762b6015642b7c2c247d8a6bdb92f0bd16f",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-f3f976dc",
        "signature_version": "v1",
        "digest": {
            "function_hash": "121417669775055737212415030206987356174",
            "length": 392.0
        },
        "signature_type": "Function",
        "target": {
            "function": "getRelativePath",
            "file": "echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsService.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/9e97bec69d0f8c2e8471276fa79eab88f0536925",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-f55d91d9",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "273353365481417993843249895730102653382",
                "205629369283818576291748270701353419136",
                "289306276140895576365782504652196524789",
                "71680636402484649148626871985715212652"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "kork/kork-secrets/src/main/java/com/netflix/spinnaker/kork/secrets/engines/AbstractStorageSecretEngine.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/e57c0db4584b398473a7bbb19402ce6c1e89b627",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-f59aa28e",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "246226563571738667109527729182909737155",
                "138500072527149236310798805776886579496",
                "238518080540978553302133668678076545891",
                "101127717506438323873532387271031616993",
                "12161192250156353663658742715771294638",
                "316203441114325929402541876384413571570",
                "245578833039157659393331682037753170278",
                "233480048431282752529346361210789914594",
                "248507262279958068398034929223054075576"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "kork/kork-core/src/main/java/com/netflix/spinnaker/kork/yaml/YamlHelper.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/f69d7b534d068ed74d0d3a1fbf17e2c945d36e5e",
        "deprecated": false
    },
    {
        "id": "CVE-2026-44795-fd79e6d8",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "244506589461995779394654401529488534655",
                "121570560466001706569260388166262418851",
                "172838142966300204985652308539936601967",
                "276137351684269750816761170351526079373",
                "105772944571257849777881259155501516151",
                "244994790853761028810131073412709327545",
                "160830314919003553991753016290327970669",
                "80115661767324399767011065488403237954",
                "259253936780749974120662547335140814286",
                "306016351657702606368706544303061240679"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "orca/orca-clouddriver/src/main/java/com/netflix/spinnaker/orca/clouddriver/tasks/providers/aws/cloudformation/DeployCloudFormationTask.java"
        },
        "source": "https://github.com/spinnaker/spinnaker/commit/4cbe1d5fea9df573aadfd8b093fb4b594b354ee5",
        "deprecated": false
    }
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-44795.json"