CVE-2022-38580
Critical · 9.8CVSS
9.8
EPSS
15.9%
Published
Oct 25, 2022
CISA due date
—
The record
Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/zalando/skipper | 0 | 0.13.237 |
Related vulnerabilities
- GO-2026-4327 Skipper is vulnerable to arbitrary code execution through lua filters in… Also affects github.com/zalando/skipper
- GO-2026-4378 Skipper Ingress Controller Allows Unauthorized Access to Internal Services via… Also affects github.com/zalando/skipper
- CVE-2026-24470 Skipper is an HTTP router and reverse proxy for service composition. Also affects github.com/zalando/skipper
- CVE-2026-23742 Skipper is an HTTP router and reverse proxy for service composition. Also affects github.com/zalando/skipper
- CVE-2026-114730 Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a… CWE-918
- CVE-2026-87953 Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider… CWE-918
- CVE-2026-114634 WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in… CWE-918
- CVE-2026-112288 Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that… CWE-918