Meet Corgea at Black Hat, BSides Las Vegas & DEF CON
Start for Free
go

github.com/zalando/skipper

View on go registry
9 Total advisories
9 Vulnerabilities
0 Malware

Vulnerabilities

CRITICAL 10.0
Go

CVE-2026-50197

Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding — chunked / HTTP/2 requests
UNKNOWN
Go

CVE-2026-24470

Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName in github.com/zalando/skipper
UNKNOWN
Go

CVE-2026-23742

Skipper is vulnerable to arbitrary code execution through lua filters in github.com/zalando/skipper
UNKNOWN
Go

CVE-2022-34296

Query predicate bypass in Zalando Skipper in github.com/zalando/skipper
HIGH 8.8
Go

CVE-2026-23742

Skipper is vulnerable to arbitrary code execution through lua filters
HIGH 8.1
Go

CVE-2026-24470

Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName
HIGH 7.5
Go

CVE-2022-34296

Query predicate bypass in Zalando Skipper
UNKNOWN
Go

CVE-2022-38580

Server-side request forger via X-Skipper-Proxy in github.com/zalando/skipper
CRITICAL 9.8
Go

CVE-2022-38580

Skipper vulnerable to SSRF via X-Skipper-Proxy

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes