PT-2026-6504 · Go · Github.Com/Zalando/Skipper

Published 2026-02-03 · Updated 2026-02-03

OSV

Skipper is vulnerable to arbitrary code execution through lua filters in github.com/zalando/skipper

Related Identifiers

GO-2026-4327

Affected Products

Github.Com/Zalando/Skipper

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-23742 · Security Note
• https://osv.dev/vulnerability/GO-2026-4327 · Vendor Advisory
• https://github.com/zalando/skipper/commit/0b52894570773b29e2f3c571b94b4211ef8fa714 · Note
• https://github.com/zalando/skipper/security/advisories/GHSA-cc8m-98fm-rc9g · Note
• https://github.com/zalando/skipper/releases/tag/v0.23.0 · Note