github.com/crossplane/crossplane vulnerabilities (Go)
5 vulnerabilities.
-
github.com/crossplane/crossplaneGo Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag 9.0 Critical -
github.com/crossplane/crossplaneGo github.com/crossplane/crossplane: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 9.8 Critical -
github.com/crossplane/crossplaneGo Crossplane vulnerable to possible image tampering from missing image validation for Packages 8.4 High -
github.com/crossplane/crossplaneGo Crossplane vulnerable to denial of service from large image 3.4 Low -
github.com/crossplane/crossplaneGo Unchecked fieldpath index in Composition's patches can lead to arbitrary memory allocation in crossplane 6.2 Medium