skipper — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in skipper, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-54247	Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS CWE-770	4.3	Medium	2026-09-14
CVE-2026-54246	Skipper routesrv-no-auth: All routesrv API Endpoints Lack Authentication CWE-306	5.7	Medium	2026-09-14
CVE-2026-65838	Skipper: an oversized declared-`Content-Length` body still hands OPA an empty `parsed_body`, so deny-on-presence Rego policies fail OPEN while the full payload reaches upstream CWE-754	8.2	High	2026-09-14
CVE-2026-65604	Skipper Incomplete Fix for CVE-2026-50197 Policy Bypass CWE-20	8.2	High	2026-07-23
CVE-2026-50197	Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding: chunked / HTTP/2 requests CWE-444	-	-	2026-07-17
CVE-2026-24470	Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName CWE-441	8.1	High	2026-01-26
CVE-2026-23742	Skipper arbitrary code execution through lua filters CWE-94	8.8	High	2026-01-16

All 7 known CVE vulnerabilities affecting skipper with full Chinese analysis, references, and POCs where available.