CR
Product
crossplane
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 1
Watch
Add crossplane to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38495 | 9.8 | Jul 27 | Crossplane vulnerable to possible image tampering from missing image validation for Packages Affected: < 1.11.5; >= 1.12.0, < 1.12.3 |
| CVE-2023-27484 | 4.9 | Mar 9 | Unchecked fieldpath index in Composition's patches can lead to arbitrary memory allocation in crossplane Affected: < 1.9.2; >= 1.10.0, < 1.10.3; >= 1.11.0, < 1.11.2 |
| CVE-2023-37900 | 2.7 | Jul 27 | Crossplane vulnerable to denial of service from large image Affected: < 1.11.5; >= 1.12.0, < 1.12.3 |
Showing 3