zalando records

4 published records for vendor zalando.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
44Plan	CVE-2022-38580Proof of concept	Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).zalando · skipper · CWE-918 Pre-auth SSRF	Critical9.8	—	15.8%	Oct 25, 2022
35Monitor	CVE-2026-23742No exploit	Skipper arbitrary code execution through lua filterszalando · skipper · CWE-94 RCE	High8.8	—	0.5%	Jan 16, 2026
32Monitor	CVE-2026-24470No exploit	Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalNamezalando · skipper · CWE-441	High8.1	—	0.3%	Jan 26, 2026
30Monitor	CVE-2022-34296No exploit	In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.zalando · skipper Pre-auth	High7.5	—	1.1%	Jun 23, 2022

CVE-2022-38580
44Plan
Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
CriticalCVSS 9.8Proof of conceptEPSS 15%
- Pre-auth
- SSRF
zalando · skipperOct 25, 2022
CVE-2026-23742
35Monitor
Skipper arbitrary code execution through lua filters
HighCVSS 8.8No exploitEPSS 0%
- RCE
zalando · skipperJan 16, 2026
CVE-2026-24470
32Monitor
Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName
HighCVSS 8.1No exploitEPSS 0%
zalando · skipperJan 26, 2026
CVE-2022-34296
30Monitor
In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
zalando · skipperJun 23, 2022