CVE-2025-61916
1 advisory.
Maven/io.spinnaker.clouddriver:clouddriver-artifacts CVE-2025-61916: high 7.9
Spinnaker vulnerable to SSRF due to improper restrictions on http from user input
Action: Upgrade io.spinnaker.clouddriver:clouddriver-artifacts to 2025.1.6 (2025.1.x) or 2025.2.3 (2025.2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2025.1.6 | - |
| 2025.2.0 | 2025.2.3 | - |
Fixed versions
| 2025.1.6 | 2025.2.3 |
Sources
- osv: GHSA-vrjc-q2fh-6x9h
- https://github.com/spinnaker/spinnaker/security/advisories/GHSA-vrjc-q2fh-6x9h
- https://nvd.nist.gov/vuln/detail/CVE-2025-61916
- https://github.com/spinnaker/spinnaker
CVE-2025-61916 · published · modified · JSON