crossplane Summary

Latest vulnerabilities published by crossplane

JSON RSS CSV 🔔 Create Alert Trigger

4 October 2026

Time-of-check Time-of-use Issue in Crossplane Runtime by Crossplane
CVE-2026-105163
CrossplaneCrossplane-runtime6.9MEDIUM

27 July 2023

Crossplane vulnerable to possible image tampering from missing image validation for Packages
CVE-2023-38495
CrossplaneCrossplane8.4HIGH
Crossplane vulnerable to denial of service from large image
CVE-2023-37900
CrossplaneCrossplane3.4LOW

9 March 2023

fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime
CVE-2023-27483
CrossplaneCrossplane-runtime5.9MEDIUM
Unchecked fieldpath index in Composition's patches can lead to arbitrary memory allocation in crossplane
CVE-2023-27484
CrossplaneCrossplane6.2MEDIUM