Vendor

    Crossplane

    5 known vulnerabilities in products by Crossplane, 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Crossplane
    CriticalCVE-2023-38495

    Crossplane vulnerable to possible image tampering from missing image validation for Packages

    also in 2 other products

    		8.4
    MediumCVE-2026-105163

    crossplane crossplane-runtime ImageConfig client.go Get toctou

    also in 1 other product

    		5.3
    HighCVE-2023-27483

    fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime

    also in 1 other product

    		5.9
    MediumCVE-2023-27484

    Crossplane: Uncontrolled Resource Consumption

    also in 1 other product

    		6.2
    LowCVE-2023-37900

    Crossplane vulnerable to denial of service from large image

    also in 2 other products

    		3.4

    Products

    Products by Crossplane
    Crossplane30