Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/zalando/skipper

go

Package skipper provides an HTTP routing library with flexible configuration as well as a runtime update of the routing rules.

View on github.com · View on proxy.golang.org

Security Advisories for github.com/zalando/skipper in go

High
about 1 month ago

Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies GSA_kwCzR0hTQS04cXFtLWZwMnEtdjczNM4ABbIi

go github.com/zalando/skipper
Moderate
about 1 month ago

Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication GSA_kwCzR0hTQS01NTg3LTJ4NTQtamo2aM4ABbIh

go github.com/zalando/skipper
Moderate
about 1 month ago

Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS GSA_kwCzR0hTQS1jd3hxLXJjOXgtMmp2ds4ABbGz

go github.com/zalando/skipper
High
about 1 month ago

Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding — chunked / HTTP/2 requests GSA_kwCzR0hTQS02NTlmLXJncDUtdzR3Zs4ABaXl

go github.com/zalando/skipper
High
7 months ago

Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName GSA_kwCzR0hTQS1teHhjLXA4MjItMmh4Oc4ABRlf

go github.com/zalando/skipper
High
7 months ago

Skipper is vulnerable to arbitrary code execution through lua filters GSA_kwCzR0hTQS1jYzhtLTk4Zm0tcmM5Z84ABRMq

go github.com/zalando/skipper
Critical
almost 4 years ago

Skipper vulnerable to SSRF via X-Skipper-Proxy GSA_kwCzR0hTQS1mMnJqLW00MnItNmptMs4AAvil

go github.com/zalando/skipper
High
about 4 years ago

Query predicate bypass in Zalando Skipper GSA_kwCzR0hTQS1xeDJqLTg1cTUtZmZwOM4AAs72

go github.com/zalando/skipper

Filter by Severity

High 5 Moderate 2 Critical 1