crossplane vulnerabilities
5 published CVEs name crossplane among the affected products.
- Published CVEs
- 5
- Last 12 months
- 1
- Critical
- 0
- Known exploited
- 0
Critical 0High 1Medium 3Low 1Not scored 0
CVEs per yearBy the year they were published
- 20234
- 20261
Newest CVEs
- CVE-2026-105163
crossplane crossplane-runtime ImageConfig client.go Get toctou
crossplane · crossplane-runtime
Medium6.9 - CVE-2023-38495
Crossplane vulnerable to possible image tampering from missing image validation for Packages
crossplane · crossplane
High8.4 - CVE-2023-37900
Crossplane vulnerable to denial of service from large image
crossplane · crossplane
Low3.4 - CVE-2023-27484
Unchecked fieldpath index in Composition's patches can lead to arbitrary memory allocation in crossplane
crossplane · crossplane
Medium6.2 - CVE-2023-27483
fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime
crossplane · crossplane-runtime
Medium5.9