Log in Start free

crossplane

Products

ProductCVEsExploitedLatest
crossplane3–Jul 27, 2023
crossplane-runtime2–Oct 4, 2026

Exploited and recent CVEs

  • CVE-2026-105163 Medium 5.3 crossplane crossplane-runtime ImageConfig client.go Get toctou 0.3%
  • CVE-2023-38495 High 8.4 Crossplane vulnerable to possible image tampering from missing image validation for Packages 0.8%
  • CVE-2023-37900 Low 3.4 Crossplane vulnerable to denial of service from large image 0.6%
  • CVE-2023-27484 Medium 6.2 Unchecked fieldpath index in Composition's patches can lead to arbitrary memory allocation in crossplane 0.7%
  • CVE-2023-27483 Medium 5.9 fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime 0.8%