{"id":"CVE-2026-44795","summary":"Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types","details":"Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to 2026.1.0, 2026.0.3, 2025.4.4, and 2025.3.3, unsafe YAML processing bypasses safe deserialization when using CloudFormation deployments or CloudFoundry baking. The use of a non-safe constructor allows arbitrary loading of Java classes, leading to remote code execution. This issue is fixed in versions 2026.1.0, 2026.0.3, 2025.4.4, and 2025.3.3.","aliases":["GHSA-c8q4-9h32-2ww8"],"modified":"2026-08-04T16:35:13.888745Z","published":"2026-07-10T21:49:27.287Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-470","CWE-502"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44795.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44795.json"},{"type":"ADVISORY","url":"https://github.com/spinnaker/spinnaker/security/advisories/GHSA-c8q4-9h32-2ww8"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44795"},{"type":"FIX","url":"https://github.com/spinnaker/spinnaker/commit/4cbe1d5fea9df573aadfd8b093fb4b594b354ee5"},{"type":"FIX","url":"https://github.com/spinnaker/spinnaker/commit/e57c0db4584b398473a7bbb19402ce6c1e89b627"},{"type":"FIX","url":"https://github.com/spinnaker/spinnaker/commit/f69d7b534d068ed74d0d3a1fbf17e2c945d36e5e"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/spinnaker/spinnaker","events":[{"introduced":"6465902a6651ea50fa821259c7bbe68475e49251"},{"introduced":"6e1a64976a812b9dab7b61d08e96f0b22b9ed24c"},{"introduced":"0"},{"fixed":"9e97bec69d0f8c2e8471276fa79eab88f0536925"},{"fixed":"5aec138dee89abaeecfa782f0bd8b5bdf16d9a55"},{"fixed":"d420f762b6015642b7c2c247d8a6bdb92f0bd16f"},{"fixed":"4cbe1d5fea9df573aadfd8b093fb4b594b354ee5"},{"fixed":"e57c0db4584b398473a7bbb19402ce6c1e89b627"},{"fixed":"f69d7b534d068ed74d0d3a1fbf17e2c945d36e5e"}],"database_specific":{"extracted_events":[{"introduced":"2025.4.0"},{"fixed":"2025.4.4"},{"introduced":"2026.0.0"},{"fixed":"2026.0.3"},{"introduced":"0"},{"fixed":"2025.3.3"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["echo-2025.4-7","echo-2026.0-7","rosco-2025.4-6","bn-rosco-release-2025.4.x-6","rosco-2026.0-6","bn-rosco-release-2026.0.x-6","echo-2025.4-6","echo-2026.0-6","deck-2025.4-5","bn-deck-release-2025.4.x-5","rosco-2026.0-5","orca-2026.0-4","keel-2026.0-4","kayenta-2026.0-4","igor-2026.0-4","halyard-2026.0-8","gate-2026.0-10","front50-2026.0-4","fiat-2026.0-4","echo-2026.0-5","clouddriver-2026.0-8","bn-orca-release-2026.0.x-4","bn-keel-release-2026.0.x-4","bn-kayenta-release-2026.0.x-4","bn-igor-release-2026.0.x-4","bn-halyard-release-2026.0.x-8","bn-gate-release-2026.0.x-10","bn-front50-release-2026.0.x-4","bn-fiat-release-2026.0.x-4","bn-clouddriver-release-2026.0.x-8","rosco-2025.4-5","orca-2025.4-6","keel-2025.4-4","kayenta-2025.4-6","igor-2025.4-4","halyard-2025.4-11","gate-2025.4-9","front50-2025.4-4","fiat-2025.4-4","echo-2025.4-5","bn-orca-release-2025.4.x-6","bn-keel-release-2025.4.x-4","bn-kayenta-release-2025.4.x-6","bn-igor-release-2025.4.x-4","bn-halyard-release-2025.4.x-11","bn-gate-release-2025.4.x-9","bn-front50-release-2025.4.x-4","bn-fiat-release-2025.4.x-4","bn-clouddriver-release-2025.4.x-10","halyard-2025.4-10","clouddriver-2025.4-9","halyard-2026.0-7","clouddriver-2026.0-7","rosco-main-69","orca-main-113","keel-main-69","kayenta-main-116","igor-main-77","halyard-main-125","gate-main-104","front50-main-71","fiat-main-67","echo-main-78","clouddriver-main-115","rosco-main-68","orca-main-112","keel-main-68","kayenta-main-115","igor-main-76","halyard-main-124","gate-main-103","front50-main-70","fiat-main-66","echo-main-77","clouddriver-main-114","orca-main-111","kayenta-main-114","igor-main-75","halyard-main-123","gate-main-102","echo-main-76","spinnaker-release-2026.0.2","rosco-2026.0.2","orca-2026.0.2","keel-2026.0.2","kayenta-2026.0.2","igor-2026.0.2","halyard-2026.0.2","gate-2026.0.2","gate-2026.0-9","front50-2026.0.2","fiat-2026.0.2","echo-2026.0.2","deck-kayenta-2026.0.2","deck-2026.0.2","clouddriver-2026.0.2","spinnaker-release-2025.4.3","rosco-2025.4.3","orca-2025.4.3","keel-2025.4.3","kayenta-2025.4.3","igor-2025.4.3","halyard-2025.4.3","gate-2025.4.3","gate-2025.4-8","front50-2025.4.3","fiat-2025.4.3","echo-2025.4.3","deck-kayenta-2025.4.3","deck-2025.4.3","clouddriver-2025.4.3","halyard-main-122","clouddriver-main-113","halyard-main-121","clouddriver-main-112","halyard-main-120","clouddriver-main-111","rosco-main-67","orca-main-110","keel-main-67","kayenta-main-113","igor-main-74","halyard-main-119","gate-main-101","front50-main-69","fiat-main-65","echo-main-75","clouddriver-main-110","rosco-main-66","orca-main-109","keel-main-66","kayenta-main-112","igor-main-73","halyard-main-118","gate-main-100","front50-main-68","fiat-main-64","echo-main-74","clouddriver-main-109","rosco-main-65","orca-main-108","keel-main-65","kayenta-main-111","igor-main-72","halyard-main-117","gate-main-99","front50-main-67","fiat-main-63","echo-main-73","clouddriver-main-108","rosco-main-64","orca-main-107","keel-main-64","kayenta-main-110","igor-main-71","halyard-main-116","gate-main-98","front50-main-66","fiat-main-62","echo-main-72","clouddriver-main-107","halyard-main-115","clouddriver-main-106","rosco-main-63","orca-main-106","keel-main-63","kayenta-main-109","igor-main-70","halyard-main-114","gate-main-97","front50-main-65","fiat-main-61","echo-main-71","clouddriver-main-105","halyard-main-113","rosco-main-62","orca-main-105","keel-main-62","kayenta-main-108","igor-main-69","halyard-main-111","gate-main-96","front50-main-64","fiat-main-60","echo-main-69","clouddriver-main-104","rosco-main-61","orca-main-104","keel-main-61","kayenta-main-107","igor-main-68","halyard-main-112","gate-main-95","front50-main-63","fiat-main-59","echo-main-70","clouddriver-main-103","rosco-main-60","orca-main-103","keel-main-60","kayenta-main-106","igor-main-67","halyard-main-110","gate-main-94","front50-main-62","fiat-main-58","echo-main-68","clouddriver-main-102","rosco-main-59","orca-main-102","keel-main-59","kayenta-main-105","igor-main-66","halyard-main-109","gate-main-93","front50-main-61","fiat-main-57","echo-main-67","clouddriver-main-101","rosco-main-58","orca-main-101","keel-main-58","kayenta-main-104","igor-main-65","halyard-main-108","gate-main-92","front50-main-60","fiat-main-56","echo-main-66","clouddriver-main-100","rosco-main-57","orca-main-100","keel-main-57","kayenta-main-103","igor-main-64","halyard-main-107","gate-main-91","front50-main-59","fiat-main-55","echo-main-65","clouddriver-main-99","keel-main-56","kayenta-main-102","halyard-main-106","rosco-main-56","orca-main-99","keel-main-55","kayenta-main-101","igor-main-63","halyard-main-105","gate-main-90","front50-main-58","fiat-main-54","echo-main-64","clouddriver-main-98","gate-2025.4-7","gate-2025.4-6","rosco-2026.0-4","orca-2026.0-3","keel-2026.0-3","kayenta-2026.0-3","igor-2026.0-3","halyard-2026.0-6","gate-2026.0-8","front50-2026.0-3","fiat-2026.0-3","echo-2026.0-4","clouddriver-2026.0-6","rosco-2025.4-4","orca-2025.4-5","keel-2025.4-3","kayenta-2025.4-5","igor-2025.4-3","halyard-2025.4-9","gate-2025.4-5","front50-2025.4-3","fiat-2025.4-3","echo-2025.4-4","clouddriver-2025.4-8","gate-2026.0-7","gate-2025.4-4","gate-2026.0-6","gate-2026.0-5","halyard-2026.0-5","clouddriver-2026.0-5","halyard-2025.4-8","clouddriver-2025.4-7","halyard-2025.3-8","clouddriver-2025.3-7","spinnaker-release-2026.0.1","rosco-2026.0.1","orca-2026.0.1","keel-2026.0.1","kayenta-2026.0.1","igor-2026.0.1","halyard-2026.0.1","gate-2026.0.1","front50-2026.0.1","fiat-2026.0.1","echo-2026.0.1","deck-kayenta-2026.0.1","deck-2026.0.1","clouddriver-2026.0.1","spinnaker-release-2025.3.2","rosco-2025.3.2","orca-2025.3.2","keel-2025.3.2","kayenta-2025.3.2","igor-2025.3.2","halyard-2025.3.2","halyard-2025.3-7","gate-2025.3.2","front50-2025.3.2","fiat-2025.3.2","echo-2025.3.2","echo-2025.3-3","deck-kayenta-2025.3.2","deck-2025.3.2","clouddriver-2025.3.2","clouddriver-2025.3-6","spinnaker-release-2025.4.2","rosco-2025.4.2","orca-2025.4.2","keel-2025.4.2","kayenta-2025.4.2","igor-2025.4.2","halyard-2025.4.2","gate-2025.4.2","front50-2025.4.2","fiat-2025.4.2","echo-2025.4.2","deck-kayenta-2025.4.2","deck-2025.4.2","clouddriver-2025.4.2","gate-main-71","rosco-main-48","orca-main-91","keel-main-47","kayenta-main-93","igor-main-54","halyard-main-93","gate-main-70","front50-main-50","fiat-main-46","echo-main-55","clouddriver-main-86","igor-main-53","rosco-main-47","orca-main-90","keel-main-46","kayenta-main-92","igor-main-52","halyard-main-92","gate-main-69","front50-main-49","fiat-main-45","echo-main-54","clouddriver-main-85","gate-main-68","gate-2026.0-4","gate-2025.4-3","gate-main-67","halyard-2026.0-4","echo-2026.0-3","clouddriver-2026.0-4","halyard-2025.4-7","echo-2025.4-3","clouddriver-2025.4-6","bn-spin-release-2026.0.x-3","halyard-main-91","clouddriver-main-84","halyard-main-90","clouddriver-main-83","echo-main-53","rosco-main-46","orca-main-89","keel-main-45","kayenta-main-91","igor-main-51","halyard-main-89","gate-main-66","front50-main-48","fiat-main-44","echo-main-52","clouddriver-main-82","kayenta-main-90","gate-2026.0-3","gate-main-65","rosco-main-45","orca-main-88","keel-main-44","kayenta-main-89","igor-main-50","halyard-main-88","gate-main-64","front50-main-47","fiat-main-43","echo-main-51","clouddriver-main-81","gate-main-63","gate-main-62","igor-main-49","rosco-main-44","orca-main-87","keel-main-43","kayenta-main-88","igor-main-48","halyard-main-87","gate-main-61","front50-main-46","fiat-main-42","echo-main-50","clouddriver-main-80","orca-main-86","kayenta-main-87","deck-main-3","halyard-main-86","rosco-2026.0.0","rosco-2026.0-3","orca-2026.0.0","orca-2026.0-2","keel-2026.0.0","keel-2026.0-2","kayenta-2026.0.0","kayenta-2026.0-2","igor-2026.0.0","igor-2026.0-2","halyard-2026.0.0","halyard-2026.0-3","gate-2026.0.0","gate-2026.0-2","front50-2026.0.0","front50-2026.0-2","fiat-2026.0.0","fiat-2026.0-2","echo-2026.0.0","echo-2026.0-2","clouddriver-2026.0.0","clouddriver-2026.0-3","rosco-2025.3-2","orca-2025.3-3","keel-2025.3-2","kayenta-2025.3-3","igor-2025.3-2","halyard-2025.3-6","gate-2025.3-2","front50-2025.3-2","fiat-2025.3-2","echo-2025.3-2","clouddriver-2025.3-5","bn-orca-release-2025.3.x-3","bn-keel-release-2025.3.x-2","bn-kayenta-release-2025.3.x-3","bn-igor-release-2025.3.x-2","bn-front50-release-2025.3.x-2","bn-fiat-release-2025.3.x-2","rosco-2025.4-3","orca-2025.4-4","keel-2025.4-2","kayenta-2025.4-4","igor-2025.4-2","halyard-2025.4-6","gate-2025.4-2","front50-2025.4-2","fiat-2025.4-2","echo-2025.4-2","clouddriver-2025.4-5","rosco-main-43","orca-main-85","keel-main-42","kayenta-main-86","igor-main-47","halyard-main-85","gate-main-60","front50-main-45","fiat-main-41","echo-main-49","clouddriver-main-79","halyard-2025.3-5","clouddriver-2025.3-4","halyard-2025.4-5","clouddriver-2025.4-4","rosco-main-42","orca-main-84","keel-main-41","kayenta-main-85","igor-main-46","halyard-main-84","gate-main-59","front50-main-44","fiat-main-40","echo-main-48","clouddriver-main-78","halyard-main-83","clouddriver-main-77","spinnaker-release-2025.3.1","deck-kayenta-2025.3.1","rosco-2026.0-1","orca-2026.0-0","keel-2026.0-0","kayenta-2026.0-0","igor-2026.0-0","halyard-2026.0-0","gate-2026.0-0","front50-2026.0-0","fiat-2026.0-0","echo-2026.0-0","clouddriver-2026.0-0","bn-deck-release-2026.0.x-1","bn-deck-kayenta-release-2026.0.x-1","rosco-main-41","orca-main-83","keel-main-40","kayenta-main-84","igor-main-45","halyard-main-82","gate-main-58","front50-main-43","fiat-main-39","echo-main-47","clouddriver-main-76","deck-2025.3.1","gate-main-57","gate-main-56","halyard-main-81","clouddriver-main-75","orca-2025.3-2","kayenta-2025.3-2","halyard-2025.3-4","clouddriver-2025.3-3","spinnaker-release-2025.4.1","deck-kayenta-2025.4.1","bn-deck-kayenta-release-2025.4.x-6","bn-deck-kayenta-release-2025.3.x-6","rosco-2025.3.1","orca-2025.3.1","keel-2025.3.1","kayenta-2025.3.1","igor-2025.3.1","halyard-2025.3.1","halyard-2025.3-3","gate-2025.3.1","front50-2025.3.1","fiat-2025.3.1","echo-2025.3.1","clouddriver-2025.3.1","clouddriver-2025.3-2","orca-2025.4-3","kayenta-2025.4-3","halyard-2025.4-4","deck-2025.4.1","clouddriver-2025.4-3","orca-main-82","kayenta-main-83","halyard-main-80","clouddriver-main-74","halyard-2025.4-3","clouddriver-2025.4-2","deck-2025.3-3","deck-2025.4-4","halyard-main-79","clouddriver-main-73","deck-2025.4.0-rc1","halyard-2025.4-2","clouddriver-2025.4.1","rosco-2025.3-1","orca-2025.3-1","keel-2025.3-1","kayenta-2025.3-1","igor-2025.3-1","halyard-2025.3-2","gate-2025.3-1","front50-2025.3-1","fiat-2025.3-1","echo-2025.3-1","gate-main-55","halyard-2025.3-1","orca-main-81","kayenta-main-82","echo-main-46","orca-main-80","kayenta-main-81","rosco-main-40","orca-main-79","keel-main-39","kayenta-main-80","igor-main-44","halyard-main-78","gate-main-54","front50-main-42","fiat-main-38","echo-main-45","clouddriver-main-72","rosco-main-39","orca-main-78","keel-main-38","kayenta-main-79","igor-main-43","halyard-main-77","gate-main-53","front50-main-41","fiat-main-37","echo-main-44","rosco-main-38","rosco-2025.4.1","rosco-2025.4-2","orca-2025.4.1","orca-2025.4-2","keel-2025.4.1","keel-2025.4-1","kayenta-2025.4.1","kayenta-2025.4-2","igor-2025.4.1","igor-2025.4-1","halyard-2025.4.1","halyard-2025.4-1","gate-2025.4.1","gate-2025.4-1","front50-2025.4.1","front50-2025.4-1","fiat-2025.4.1","fiat-2025.4-1","echo-2025.4.1","echo-2025.4-1","clouddriver-2025.4-1","spinnaker-release-2025.3.0","rosco-2025.3.0","orca-2025.3.0","keel-2025.3.0","kayenta-2025.3.0","igor-2025.3.0","halyard-2025.3.0","gate-2025.3.0","front50-2025.3.0","fiat-2025.3.0","echo-2025.3.0","deck-kayenta-2025.3.0","deck-2025.3.0","clouddriver-2025.3.0","bn-spin-release-2025.3.x-3","halyard-main-76","halyard-main-75","halyard-main-74","rosco-main-37","orca-main-77","keel-main-37","kayenta-main-78","igor-main-42","halyard-main-73","gate-main-52","front50-main-40","fiat-main-36","echo-main-43","rosco-main-36","orca-main-76","keel-main-36","kayenta-main-77","igor-main-41","halyard-main-72","gate-main-51","front50-main-39","fiat-main-35","echo-main-42","orca-2025.4-1","kayenta-2025.4-1","orca-main-75","keel-main-35","kayenta-main-76","halyard-main-71","gate-main-50","front50-main-38","fiat-main-34","echo-main-41","orca-main-74","kayenta-main-75","spinnaker-release-2025.4.0","rosco-main-30","rosco-2025.4.0","rosco-2025.4-1","orca-main-68","orca-2025.4.0","orca-2025.4-0","keel-main-31","keel-2025.4.0","keel-2025.4-0","kayenta-main-69","kayenta-2025.4.0","kayenta-2025.4-0","igor-main-36","igor-2025.4.0","igor-2025.4-0","halyard-main-65","halyard-2025.4.0","halyard-2025.4-0","gate-main-46","gate-2025.4.0","gate-2025.4-0","front50-main-34","front50-2025.4.0","front50-2025.4-0","fiat-main-30","fiat-2025.4.0","fiat-2025.4-0","echo-main-37","echo-2025.4.0","echo-2025.4-0","deck-kayenta-2025.4.0","deck-kayenta-2025.4-0","deck-2025.4.0","deck-2025.4-0","clouddriver-main-60","clouddriver-2025.4.0","clouddriver-2025.4-0","bn-spin-release-2025.4.x-0","rosco-main-34","orca-main-73","keel-main-34","kayenta-main-74","igor-main-39","halyard-main-70","gate-main-49","front50-main-37","fiat-main-33","echo-main-40","halyard-main-69","orca-main-72","kayenta-main-73","halyard-main-68","orca-main-71","kayenta-main-72","rosco-main-33","orca-main-70","keel-main-33","kayenta-main-71","igor-main-38","halyard-main-67","gate-main-48","front50-main-36","fiat-main-32","echo-main-39","clouddriver-main-62","rosco-main-32","orca-main-69","keel-main-32","kayenta-main-70","igor-main-37","halyard-main-66","gate-main-47","front50-main-35","fiat-main-31","echo-main-38","clouddriver-main-61","rosco-main-31","rosco-2025.3-0","orca-main-65","orca-2025.3-0","keel-2025.3-0","kayenta-main-66","kayenta-2025.3-0","igor-2025.3-0","halyard-2025.3-0","gate-2025.3-0","front50-2025.3-0","fiat-2025.3-0","echo-2025.3-0","deck-kayenta-2025.3-0","deck-2025.3-0","clouddriver-2025.3-0","echo-main-34","orca-main-64","kayenta-main-65","orca-main-63","kayenta-main-64","orca-main-62","kayenta-main-63","orca-main-60","kayenta-main-61","orca-main-59","kayenta-main-60","halyard-main-62","gate-main-42","front50-main-31","halyard-main-61","clouddriver-main-57","orca-main-58","kayenta-main-59","gate-main-41","gate-main-40","orca-main-57","kayenta-main-58","halyard-main-60","clouddriver-main-56","orca-main-56","kayenta-main-57","rosco-main-27","orca-main-55","keel-main-28","kayenta-main-56","igor-main-33","halyard-main-59","gate-main-39","front50-main-30","fiat-main-27","echo-main-33","clouddriver-main-55","orca-main-54","kayenta-main-55","rosco-main-26","orca-main-53","keel-main-27","kayenta-main-54","igor-main-32","halyard-main-58","gate-main-38","front50-main-29","fiat-main-26","echo-main-32","clouddriver-main-54","gate-main-37","orca-main-52","kayenta-main-53","gate-main-36","orca-main-51","kayenta-main-52","orca-main-50","kayenta-main-51","orca-main-49","kayenta-main-50","orca-main-48","kayenta-main-49","orca-main-47","kayenta-main-48","gate-main-35","halyard-main-57","clouddriver-main-53","igor-main-31","orca-main-46","kayenta-main-47","orca-main-45","kayenta-main-46","halyard-main-56","clouddriver-main-52","orca-main-44","kayenta-main-45","halyard-main-55","clouddriver-main-51","orca-main-43","kayenta-main-44","halyard-main-54","clouddriver-main-50","orca-main-42","kayenta-main-43","halyard-main-53","front50-main-28","orca-main-41","kayenta-main-42","halyard-main-52","clouddriver-main-49","orca-main-40","keel-main-26","kayenta-main-41","igor-main-30","gate-main-34","front50-main-27","fiat-main-25","echo-main-31","gate-main-33","gate-main-32","spinnaker-release-2025.2.0","rosco-main-22","rosco-2025.2.0","rosco-2025.2-0","orca-main-36","orca-2025.2.0","orca-2025.2-0","keel-main-23","keel-2025.2.0","keel-2025.2-0","kayenta-main-37","kayenta-2025.2.0","kayenta-2025.2-0","igor-main-27","igor-2025.2.0","igor-2025.2-0","halyard-main-45","halyard-2025.2.0","halyard-2025.2-0","gate-main-29","gate-2025.2.0","gate-2025.2-0","front50-main-23","front50-2025.2.0","front50-2025.2-0","fiat-main-22","fiat-2025.2.0","fiat-2025.2-0","echo-main-28","echo-2025.2.0","echo-2025.2-0","deck-kayenta-2025.2.0","deck-kayenta-2025.2-0","deck-2025.2.0","deck-2025.2-0","clouddriver-main-43","clouddriver-2025.2.0","clouddriver-2025.2-0","bn-spin-release-2025.2.x-0","bn-rosco-release-2025.2.x-0","bn-keel-release-2025.2.x-0","bn-igor-release-2025.2.x-0","bn-front50-release-2025.2.x-0","bn-fiat-release-2025.2.x-0","halyard-main-50","front50-main-26","rosco-main-24","orca-main-39","keel-main-25","kayenta-main-40","igor-main-29","halyard-main-49","gate-main-31","front50-main-25","fiat-main-24","echo-main-30","clouddriver-main-47","halyard-main-48","clouddriver-main-46","orca-main-38","kayenta-main-39","halyard-main-47","clouddriver-main-45","rosco-main-23","orca-main-37","keel-main-24","kayenta-main-38","igor-main-28","halyard-main-46","gate-main-30","front50-main-24","fiat-main-23","echo-main-29","clouddriver-main-44","gate-main-28","halyard-main-44","clouddriver-main-42","halyard-main-43","clouddriver-main-41","halyard-main-42","clouddriver-main-40","halyard-main-41","clouddriver-main-39","halyard-main-40","clouddriver-main-38","halyard-main-39","halyard-main-38","clouddriver-main-37","rosco-main-21","orca-main-35","keel-main-22","kayenta-main-36","igor-main-26","halyard-main-37","gate-main-27","front50-main-22","fiat-main-21","echo-main-27","clouddriver-main-36","gate-main-26","rosco-main-20","orca-main-34","keel-main-21","kayenta-main-35","igor-main-25","halyard-main-36","gate-main-25","front50-main-21","fiat-main-20","echo-main-26","clouddriver-main-35","halyard-main-35","clouddriver-main-34","echo-main-25","halyard-main-34","halyard-main-33","clouddriver-main-33","orca-main-33","kayenta-main-34","rosco-2025.1.0","rosco-2025.1-0","orca-main-32","orca-2025.1.0","orca-2025.1-0","keel-2025.1.0","keel-2025.1-0","kayenta-main-33","kayenta-2025.1.0","kayenta-2025.1-0","igor-2025.1.0","igor-2025.1-0","halyard-2025.1.0","halyard-2025.1-0","gate-2025.1.0","gate-2025.1-0","front50-2025.1.0","front50-2025.1-0","fiat-2025.1.0","fiat-2025.1-0","echo-2025.1.0","echo-2025.1-0","deck-kayenta-2025.1.0","deck-kayenta-2025.1-0","deck-2025.1.0","deck-2025.1-0","clouddriver-2025.1.0","clouddriver-2025.1-0","bn-spin-release-2025.1.x-0","bn-deck-release-2025.1.x-0","bn-deck-kayenta-release-2025.1.x-0","rosco-main-19","orca-main-31","keel-main-20","kayenta-main-32","igor-main-24","halyard-main-32","gate-main-24","front50-main-20","fiat-main-19","echo-main-24","clouddriver-main-32","rosco-main-18","orca-main-30","keel-main-19","kayenta-main-31","igor-main-23","halyard-main-31","gate-main-23","front50-main-19","fiat-main-18","echo-main-23","clouddriver-main-31","gate-main-22","kayenta-main-30","halyard-main-30","clouddriver-main-30","orca-main-28","kayenta-main-29","halyard-main-29","clouddriver-main-29","keel-main-18","halyard-main-28","clouddriver-main-28","halyard-main-27","clouddriver-main-27","rosco-main-17","orca-main-27","keel-main-17","kayenta-main-28","igor-main-22","halyard-main-26","gate-main-21","front50-main-18","fiat-main-17","echo-main-22","clouddriver-main-26","orca-main-26","kayenta-main-27","halyard-main-25","clouddriver-main-25","orca-main-25","kayenta-main-26","orca-main-24","kayenta-main-25","echo-main-21","orca-main-23","kayenta-main-24","orca-main-22","kayenta-main-23","orca-main-21","kayenta-main-22","orca-main-20","kayenta-main-21","halyard-main-24","clouddriver-main-24","rosco-main-16","orca-main-19","keel-main-16","kayenta-main-20","igor-main-21","halyard-main-23","gate-main-20","front50-main-17","fiat-main-16","echo-main-20","clouddriver-main-23","orca-main-18","kayenta-main-19","echo-main-19","rosco-main-15","orca-main-17","keel-main-15","kayenta-main-18","igor-main-20","halyard-main-22","gate-main-19","front50-main-16","fiat-main-15","echo-main-18","clouddriver-main-22","rosco-main-14","orca-main-16","keel-main-14","kayenta-main-17","igor-main-19","halyard-main-21","gate-main-18","front50-main-15","fiat-main-14","echo-main-17","clouddriver-main-21","orca-main-15","keel-main-13","kayenta-main-16","igor-main-18","halyard-main-20","gate-main-17","front50-main-14","fiat-main-13","echo-main-16","clouddriver-main-20","halyard-main-19","clouddriver-main-19","igor-main-17","gate-main-16","echo-main-15","halyard-main-18","clouddriver-main-18","rosco-main-12","orca-main-14","keel-main-12","kayenta-main-15","igor-main-16","halyard-main-17","gate-main-15","front50-main-13","fiat-main-12","echo-main-14","clouddriver-main-17","rosco-main-11","orca-main-13","keel-main-11","kayenta-main-14","igor-main-15","halyard-main-16","gate-main-14","front50-main-12","fiat-main-11","echo-main-13","clouddriver-main-16","rosco-main-10","orca-main-12","keel-main-10","kayenta-main-13","igor-main-14","halyard-main-15","gate-main-13","front50-main-11","fiat-main-10","echo-main-12","clouddriver-main-15","halyard-main-14","front50-main-10","gate-main-12","gate-main-11","orca-main-11","kayenta-main-12","gate-main-10","halyard-main-13","clouddriver-main-14","rosco-main-9","orca-main-10","keel-main-9","kayenta-main-11","igor-main-13","halyard-main-12","gate-main-9","front50-main-9","fiat-main-9","echo-main-11","clouddriver-main-13","igor-main-12","rosco-main-8","orca-main-9","keel-main-8","kayenta-main-10","igor-main-11","halyard-main-11","gate-main-8","front50-main-8","fiat-main-8","echo-main-10","clouddriver-main-12","igor-main-10","halyard-main-10","clouddriver-main-11","kayenta-main-9","clouddriver-main-10","rosco-main-6","orca-main-7","keel-main-6","kayenta-main-7","igor-main-8","halyard-main-8","gate-main-6","front50-main-6","fiat-main-6","echo-main-8","clouddriver-main-9","orca-main-6","kayenta-main-6","rosco-main-5","orca-main-5","keel-main-5","kayenta-main-5","halyard-main-7","gate-main-5","front50-main-5","fiat-main-5","echo-main-7","clouddriver-main-8","igor-main-6","halyard-main-6","clouddriver-main-7","rosco-main-4","orca-main-4","keel-main-4","kayenta-main-4","igor-main-5","halyard-main-5","gate-main-4","front50-main-4","fiat-main-4","echo-main-6","clouddriver-main-6","igor-main-4","halyard-main-4","echo-main-5","deck-main-2","deck-kayenta-main-2","bn-deck-kayenta-main-2","rosco-2025.0-0","orca-2025.0-0","keel-2025.0-0","kayenta-2025.0-0","igor-2025.0-0","halyard-2025.0-0","gate-2025.0-0","front50-2025.0-0","fiat-2025.0-0","echo-main-4","echo-2025.0-0","clouddriver-2025.0-0","bn-spin-release-2025.0.x-0","bn-deck-release-2025.0.x-0","bn-deck-kayenta-release-2025.0.x-0","rosco-main-3","orca-main-3","keel-main-3","kayenta-main-3","igor-main-3","halyard-main-3","gate-main-3","front50-main-3","fiat-main-3","echo-main-3","clouddriver-main-5","rosco-main-2","orca-main-2","keel-main-2","kayenta-main-2","igor-main-2","halyard-main-2","gate-main-2","front50-main-2","fiat-main-2","echo-main-2","clouddriver-main-4","spinnaker-release-2024.0.0","rosco-main-1","orca-main-1","keel-main-1","kayenta-main-1","igor-main-1","halyard-main-1","gate-main-1","front50-main-1","fiat-main-1","echo-main-1","clouddriver-main-3","clouddriver-main-2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-44795.json","vanir_signatures_modified":"2026-08-04T16:35:13Z","vanir_signatures":[{"source":"https://github.com/spinnaker/spinnaker/commit/f69d7b534d068ed74d0d3a1fbf17e2c945d36e5e","target":{"file":"rosco/rosco-manifests/src/main/java/com/netflix/spinnaker/rosco/manifests/cloudfoundry/CloudFoundryBakeManifestService.java"},"deprecated":false,"digest":{"line_hashes":["235861081448524550697926604541702171869","99102249654533231570508622423869921239","251757546494006564125831041132408452518","53332591767418524109563907695704392423"],"threshold":0.9},"id":"CVE-2026-44795-04b581f6","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"309609728749497497740056303320676429056","length":157},"id":"CVE-2026-44795-06f4457f","signature_type":"Function","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/d420f762b6015642b7c2c247d8a6bdb92f0bd16f","target":{"file":"gate/gate-core/src/main/java/com/netflix/spinnaker/gate/services/TaskService.java","function":"cancelTask"}},{"id":"CVE-2026-44795-10847892","signature_type":"Line","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/d420f762b6015642b7c2c247d8a6bdb92f0bd16f","target":{"file":"gate/gate-core/src/main/java/com/netflix/spinnaker/gate/services/internal/OrcaService.java"},"deprecated":false,"digest":{"line_hashes":["145977159861078752422517908214440263523","219334290301690256377814569232644423490","215140012079548632696332070938664991577","61774309373613198777276918863459995301","287849326995947547843177935116696304088","213286023091378667019888297516983808305","130085442457277400751525360606417012775","212646138876028943350878337343736100954","168074117912334874262225108830715417558","113672791707020484183159448120831337281"],"threshold":0.9}},{"source":"https://github.com/spinnaker/spinnaker/commit/f69d7b534d068ed74d0d3a1fbf17e2c945d36e5e","target":{"file":"orca/orca-clouddriver/src/main/java/com/netflix/spinnaker/orca/clouddriver/tasks/providers/aws/cloudformation/DeployCloudFormationTask.java"},"deprecated":false,"digest":{"line_hashes":["244506589461995779394654401529488534655","121570560466001706569260388166262418851","172838142966300204985652308539936601967","276137351684269750816761170351526079373","105772944571257849777881259155501516151","244994790853761028810131073412709327545","160830314919003553991753016290327970669","80115661767324399767011065488403237954","259253936780749974120662547335140814286","306016351657702606368706544303061240679"],"threshold":0.9},"id":"CVE-2026-44795-23fa8646","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["273353365481417993843249895730102653382","205629369283818576291748270701353419136","289306276140895576365782504652196524789","71680636402484649148626871985715212652"],"threshold":0.9},"id":"CVE-2026-44795-2f2f4af4","signature_type":"Line","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/f69d7b534d068ed74d0d3a1fbf17e2c945d36e5e","target":{"file":"kork/kork-secrets/src/main/java/com/netflix/spinnaker/kork/secrets/engines/AbstractStorageSecretEngine.java"}},{"source":"https://github.com/spinnaker/spinnaker/commit/5aec138dee89abaeecfa782f0bd8b5bdf16d9a55","target":{"file":"echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsService.java"},"deprecated":false,"digest":{"line_hashes":["244633496895136005442836876144781901820","206302747532622533576234231040268710572","128278766332575750607569768817968144535","95309825138370142821100055205479463873","218073788644275385008463977609925117310","6901424306799913360115441728579596802","248487712364652700010936059692042870386","330774764828865647048286892483185859981","41958492924561858641171244247636884672","166897440502892873621557629105832499466","248020905971105383013141147509514925722","85472008688813742733722193308220806729","221912900417812847992683706901703459260","146413335609183899869208775653824925953","36812818217537956144955015424067008377","334702862094881414077615049126051044476","294368463313409695084634269491421804413","121586338170095282969135356876099859999","202782517570665297713925782494177814630","26870044841817964154308851863592343247","201196223469080516509778026785259274918","269807236269945061561060669326014467624","321441600043239541239886146284561854964","298015502829155290351066687640833141377","278059341685921561639097824148104746476","96687546197617546295344083797077898908","156791970464637933020050584601314972017","311197930335111127392009027251836286829","200068453137501003138442065826282209644","105357940203201968610768961660597512422","146258211800874396243154003951838427197","195343798575061699246385885897669856249","132130660711928510752039486935310324785","36135999705064282932147747083357424926","133745902580411638395115118304691982288","296963025332414878724968891317695007417","50333526524660594606621778476486571969","12968256925246022615136072548453879600","75496682968427887292487410987497222614"],"threshold":0.9},"id":"CVE-2026-44795-30d08785","signature_type":"Line","signature_version":"v1"},{"digest":{"function_hash":"319941362171852552849423740976728879728","length":263},"id":"CVE-2026-44795-6350f0bc","signature_type":"Function","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/4cbe1d5fea9df573aadfd8b093fb4b594b354ee5","target":{"function":"newYaml","file":"kork/kork-core/src/main/java/com/netflix/spinnaker/kork/yaml/YamlHelper.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"234966233154666068892167148775950461773","length":467},"id":"CVE-2026-44795-7daf35c6","signature_type":"Function","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/9e97bec69d0f8c2e8471276fa79eab88f0536925","target":{"file":"echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsService.java","function":"sendMessage"}},{"id":"CVE-2026-44795-8295c13c","signature_type":"Line","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/4cbe1d5fea9df573aadfd8b093fb4b594b354ee5","target":{"file":"kork/kork-secrets/src/main/java/com/netflix/spinnaker/kork/secrets/engines/AbstractStorageSecretEngine.java"},"deprecated":false,"digest":{"line_hashes":["273353365481417993843249895730102653382","205629369283818576291748270701353419136","289306276140895576365782504652196524789","71680636402484649148626871985715212652"],"threshold":0.9}},{"signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/4cbe1d5fea9df573aadfd8b093fb4b594b354ee5","target":{"file":"kork/kork-core/src/main/java/com/netflix/spinnaker/kork/yaml/YamlHelper.java"},"deprecated":false,"digest":{"line_hashes":["246226563571738667109527729182909737155","138500072527149236310798805776886579496","238518080540978553302133668678076545891","101127717506438323873532387271031616993","12161192250156353663658742715771294638","316203441114325929402541876384413571570","245578833039157659393331682037753170278","233480048431282752529346361210789914594","248507262279958068398034929223054075576"],"threshold":0.9},"id":"CVE-2026-44795-8e374697","signature_type":"Line"},{"signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/e57c0db4584b398473a7bbb19402ce6c1e89b627","target":{"file":"rosco/rosco-manifests/src/main/java/com/netflix/spinnaker/rosco/manifests/cloudfoundry/CloudFoundryBakeManifestService.java"},"deprecated":false,"digest":{"line_hashes":["235861081448524550697926604541702171869","99102249654533231570508622423869921239","251757546494006564125831041132408452518","53332591767418524109563907695704392423"],"threshold":0.9},"id":"CVE-2026-44795-910e0f54","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/5aec138dee89abaeecfa782f0bd8b5bdf16d9a55","target":{"file":"echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsService.java","function":"getRelativePath"},"deprecated":false,"digest":{"length":392,"function_hash":"121417669775055737212415030206987356174"},"id":"CVE-2026-44795-9e66cdd1"},{"target":{"file":"echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsClient.java"},"deprecated":false,"digest":{"line_hashes":["329441297168006195216984697805825776667","72860938043372452984936103254394934133","253770407885699064987122572715255690282","194348121243043461055789618435549264370","211623859517572629360176830335795037194","320075850525215119965724928999485517699","194606367712447319350602445672209769967"],"threshold":0.9},"id":"CVE-2026-44795-a0ee8d31","signature_type":"Line","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/5aec138dee89abaeecfa782f0bd8b5bdf16d9a55"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/e57c0db4584b398473a7bbb19402ce6c1e89b627","target":{"file":"orca/orca-clouddriver/src/main/java/com/netflix/spinnaker/orca/clouddriver/tasks/providers/aws/cloudformation/DeployCloudFormationTask.java"},"deprecated":false,"digest":{"line_hashes":["244506589461995779394654401529488534655","121570560466001706569260388166262418851","172838142966300204985652308539936601967","276137351684269750816761170351526079373","105772944571257849777881259155501516151","244994790853761028810131073412709327545","160830314919003553991753016290327970669","80115661767324399767011065488403237954","259253936780749974120662547335140814286","306016351657702606368706544303061240679"],"threshold":0.9},"id":"CVE-2026-44795-a1b81ff7"},{"signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/d420f762b6015642b7c2c247d8a6bdb92f0bd16f","target":{"file":"gate/gate-core/src/main/java/com/netflix/spinnaker/gate/services/TaskService.java","function":"cancelTasks"},"deprecated":false,"digest":{"function_hash":"299738937526561233945522115545940002237","length":169},"id":"CVE-2026-44795-a378ac59","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/9e97bec69d0f8c2e8471276fa79eab88f0536925","target":{"file":"echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsClient.java"},"deprecated":false,"digest":{"line_hashes":["329441297168006195216984697805825776667","72860938043372452984936103254394934133","253770407885699064987122572715255690282","194348121243043461055789618435549264370","211623859517572629360176830335795037194","320075850525215119965724928999485517699","194606367712447319350602445672209769967"],"threshold":0.9},"id":"CVE-2026-44795-a9758c95","signature_type":"Line"},{"id":"CVE-2026-44795-abf999d0","signature_type":"Line","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/4cbe1d5fea9df573aadfd8b093fb4b594b354ee5","target":{"file":"rosco/rosco-manifests/src/main/java/com/netflix/spinnaker/rosco/manifests/cloudfoundry/CloudFoundryBakeManifestService.java"},"deprecated":false,"digest":{"line_hashes":["235861081448524550697926604541702171869","99102249654533231570508622423869921239","251757546494006564125831041132408452518","53332591767418524109563907695704392423"],"threshold":0.9}},{"deprecated":false,"digest":{"length":267,"function_hash":"268594087600164205175137647801368699510"},"id":"CVE-2026-44795-aefd449a","signature_type":"Function","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/f69d7b534d068ed74d0d3a1fbf17e2c945d36e5e","target":{"file":"kork/kork-core/src/main/java/com/netflix/spinnaker/kork/yaml/YamlHelper.java","function":"newYaml"}},{"id":"CVE-2026-44795-c2438890","signature_type":"Function","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/5aec138dee89abaeecfa782f0bd8b5bdf16d9a55","target":{"file":"echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsService.java","function":"sendMessage"},"deprecated":false,"digest":{"function_hash":"234966233154666068892167148775950461773","length":467}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/d420f762b6015642b7c2c247d8a6bdb92f0bd16f","target":{"file":"gate/gate-core/src/main/java/com/netflix/spinnaker/gate/services/TaskService.java","function":"deleteTask"},"deprecated":false,"digest":{"function_hash":"38920186073802880304536263724044794029","length":152},"id":"CVE-2026-44795-e0d45cb9"},{"deprecated":false,"digest":{"line_hashes":["244633496895136005442836876144781901820","206302747532622533576234231040268710572","128278766332575750607569768817968144535","95309825138370142821100055205479463873","218073788644275385008463977609925117310","6901424306799913360115441728579596802","248487712364652700010936059692042870386","330774764828865647048286892483185859981","41958492924561858641171244247636884672","166897440502892873621557629105832499466","248020905971105383013141147509514925722","85472008688813742733722193308220806729","221912900417812847992683706901703459260","146413335609183899869208775653824925953","36812818217537956144955015424067008377","334702862094881414077615049126051044476","294368463313409695084634269491421804413","121586338170095282969135356876099859999","202782517570665297713925782494177814630","26870044841817964154308851863592343247","201196223469080516509778026785259274918","269807236269945061561060669326014467624","321441600043239541239886146284561854964","298015502829155290351066687640833141377","278059341685921561639097824148104746476","96687546197617546295344083797077898908","156791970464637933020050584601314972017","311197930335111127392009027251836286829","200068453137501003138442065826282209644","105357940203201968610768961660597512422","146258211800874396243154003951838427197","195343798575061699246385885897669856249","132130660711928510752039486935310324785","36135999705064282932147747083357424926","133745902580411638395115118304691982288","296963025332414878724968891317695007417","50333526524660594606621778476486571969","12968256925246022615136072548453879600","75496682968427887292487410987497222614"],"threshold":0.9},"id":"CVE-2026-44795-e14e5cf3","signature_type":"Line","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/9e97bec69d0f8c2e8471276fa79eab88f0536925","target":{"file":"echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsService.java"}},{"deprecated":false,"digest":{"function_hash":"319941362171852552849423740976728879728","length":263},"id":"CVE-2026-44795-e52185d3","signature_type":"Function","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/e57c0db4584b398473a7bbb19402ce6c1e89b627","target":{"file":"kork/kork-core/src/main/java/com/netflix/spinnaker/kork/yaml/YamlHelper.java","function":"newYaml"}},{"digest":{"threshold":0.9,"line_hashes":["246226563571738667109527729182909737155","138500072527149236310798805776886579496","238518080540978553302133668678076545891","101127717506438323873532387271031616993","12161192250156353663658742715771294638","316203441114325929402541876384413571570","245578833039157659393331682037753170278","233480048431282752529346361210789914594","248507262279958068398034929223054075576"]},"id":"CVE-2026-44795-eab2f733","signature_type":"Line","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/e57c0db4584b398473a7bbb19402ce6c1e89b627","target":{"file":"kork/kork-core/src/main/java/com/netflix/spinnaker/kork/yaml/YamlHelper.java"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/d420f762b6015642b7c2c247d8a6bdb92f0bd16f","target":{"file":"gate/gate-core/src/main/java/com/netflix/spinnaker/gate/services/TaskService.java"},"deprecated":false,"digest":{"line_hashes":["80776093172926907057771851191562519052","29501970717603343185220224071939175498","282022434576369321762038396188700362102","24866947706278230333184356476321684382","213199930756987070659744743604313925543","215044875244769665493177242617590409341","254803161717938538411099768167598312007","39765002931838537595915705602454191680","43929410957432650528900926936687785626","151949365048258061600018090558349683594","174261883715916514654239006776664789591","289168747844611864843674478993262438672","73917618769608385353319882414616626341","233522396146483124302473427042278672015","114371187083768750357973937425840728642","284617178230947834292221497295578039257"],"threshold":0.9},"id":"CVE-2026-44795-eb118a10","signature_type":"Line"},{"id":"CVE-2026-44795-f3f976dc","signature_type":"Function","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/9e97bec69d0f8c2e8471276fa79eab88f0536925","target":{"file":"echo/echo-notifications/src/main/java/com/netflix/spinnaker/echo/microsoftteams/MicrosoftTeamsService.java","function":"getRelativePath"},"deprecated":false,"digest":{"function_hash":"121417669775055737212415030206987356174","length":392}},{"signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/e57c0db4584b398473a7bbb19402ce6c1e89b627","target":{"file":"kork/kork-secrets/src/main/java/com/netflix/spinnaker/kork/secrets/engines/AbstractStorageSecretEngine.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["273353365481417993843249895730102653382","205629369283818576291748270701353419136","289306276140895576365782504652196524789","71680636402484649148626871985715212652"]},"id":"CVE-2026-44795-f55d91d9","signature_type":"Line"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["246226563571738667109527729182909737155","138500072527149236310798805776886579496","238518080540978553302133668678076545891","101127717506438323873532387271031616993","12161192250156353663658742715771294638","316203441114325929402541876384413571570","245578833039157659393331682037753170278","233480048431282752529346361210789914594","248507262279958068398034929223054075576"]},"id":"CVE-2026-44795-f59aa28e","signature_type":"Line","signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/f69d7b534d068ed74d0d3a1fbf17e2c945d36e5e","target":{"file":"kork/kork-core/src/main/java/com/netflix/spinnaker/kork/yaml/YamlHelper.java"}},{"signature_version":"v1","source":"https://github.com/spinnaker/spinnaker/commit/4cbe1d5fea9df573aadfd8b093fb4b594b354ee5","target":{"file":"orca/orca-clouddriver/src/main/java/com/netflix/spinnaker/orca/clouddriver/tasks/providers/aws/cloudformation/DeployCloudFormationTask.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["244506589461995779394654401529488534655","121570560466001706569260388166262418851","172838142966300204985652308539936601967","276137351684269750816761170351526079373","105772944571257849777881259155501516151","244994790853761028810131073412709327545","160830314919003553991753016290327970669","80115661767324399767011065488403237954","259253936780749974120662547335140814286","306016351657702606368706544303061240679"]},"id":"CVE-2026-44795-fd79e6d8","signature_type":"Line"}]}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}