Cncf

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Cncf records in CISA KEV

No Cncf vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Crossplane · all components

TI-2023-19875 CVE-2023-38495 · GHSA-pj4x-2xr5-w87m

MEDIUM 44

Crossplane is a framework for building cloud native control planes without needing to write code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2023-07-27 Fixed in 1.11.5, 1.12.3 CWE-20

TI-2023-19333 CVE-2023-37900 · GHSA-68p4-95xf-7gx8

LOW 17

Crossplane is a framework for building cloud native control planes without needing to write code.

CVSS 3.1LOW 3.4 Network High privileges User interaction EPSS 0.00621 Published 2023-07-27 Fixed in 1.11.5, 1.12.3 CWE-400