Crossplane vulnerabilities
We track 2 vulnerabilities in Crossplane products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 27, 2023.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Crossplane vulnerabilities
- 9.8 Critical severity
Crossplane is a framework for building cloud native control planes without needing to write…
Crossplane is a framework for building cloud native control planes without needing to write code. In versions prior to 1.11.5, 1.12.3, and 1.13.0, Crossplane's image backend does not validate the byte contents of Crossplane packages. As such, Crossplane does n
- 7.5 High severity
crossplane-runtime: Uncontrolled Resource Consumption
crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. An out of memory panic vulnerability has been discovered in affected versions. Applications that use the `Paved` type's `SetValue` method wit