Skip to content
OpenAdvisories

Vendor

crossplane

5 known vulnerabilities.

Products

crossplane 3 crossplane-runtime 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.4
    CVE-2023-37900

    Crossplane vulnerable to denial of service from large image

    Crossplane is a framework for building cloud native control planes without needing to write code. In versions prior to 1.11.5, 1.12.3, and 1.13.0, a high-privileged user could create a Package referencing an arbitrarily large image containing that Crossplane …

    crossplane crossplane github.com/crossplane/crossplane Go