crossplane vulnerabilities
5 published CVEs name crossplane among the affected products.
- 5Published CVEs5 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-105163
crossplane crossplane-runtime ImageConfig client.go Get toctou
crossplane · crossplane-runtime
Medium6.9 - CVE-2023-38495
Crossplane vulnerable to possible image tampering from missing image validation for Packages
crossplane · crossplane
High8.4 - CVE-2023-37900
Crossplane vulnerable to denial of service from large image
crossplane · crossplane
Low3.4 - CVE-2023-27484
Unchecked fieldpath index in Composition's patches can lead to arbitrary memory allocation in crossplane
crossplane · crossplane
Medium6.2 - CVE-2023-27483
fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime
crossplane · crossplane-runtime
Medium5.9