Skip to content
OpenAdvisories

Package · Go

github.com/crossplane/crossplane

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.2
    CVE-2023-27484

    Unchecked fieldpath index in Composition's patches can lead to arbitrary memory allocation in crossplane

    crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. In affected versions an already highly privileged user able to create or update Compositions can specify an arbitrarily high index in a patc…

    crossplane crossplane github.com/crossplane/crossplane Go