CR
Vendor
crossplane
5
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105163 | CR crossplane-runtime crossplane | 5.3 | Oct 4 | crossplane crossplane-runtime ImageConfig client.go Get toctou |
| CVE-2023-38495 | CR crossplane crossplane | 9.8 | Jul 27 | Crossplane vulnerable to possible image tampering from missing image validation for Packages |
| CVE-2023-37900 | CR crossplane crossplane | 2.7 | Jul 27 | Crossplane vulnerable to denial of service from large image |
| CVE-2023-27484 | CR crossplane crossplane | 4.9 | Mar 9 | Unchecked fieldpath index in Composition's patches can lead to arbitrary memory allocation in crossplane |
| CVE-2023-27483 | CR crossplane-runtime crossplane | 7.5 | Mar 9 | fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime |