crossplane

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

crossplane records in CISA KEV

No crossplane vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records

TI-2023-19875 CVE-2023-38495 · GHSA-pj4x-2xr5-w87m

MEDIUM 44

Crossplane is a framework for building cloud native control planes without needing to write code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2023-07-27 Fixed in 1.11.5, 1.12.3 CWE-20

TI-2026-67558 CVE-2026-105163 · GHSA-92mr-7mjc-w93g

LOW 36

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00322 Published 2026-10-04 Partial fix · 2.2.3, 2.3.3 +1 CWE-362

TI-2023-12211 CVE-2023-27483 · GHSA-vfvj-3m3g-m532

LOW 34

crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00798 Published 2023-03-09 Fixed in 0.19.2, 0.16.1 CWE-20

TI-2023-12212 CVE-2023-27484 · GHSA-v829-x6hh-cqfq

LOW 29

crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks.

CVSS 3.1MEDIUM 6.2 Adjacent network High privileges No interaction EPSS 0.00678 Published 2023-03-09 Fixed in 1.9.2, 1.10.3 +1 CWE-20

TI-2023-19333 CVE-2023-37900 · GHSA-68p4-95xf-7gx8

LOW 17

Crossplane is a framework for building cloud native control planes without needing to write code.

CVSS 3.1LOW 3.4 Network High privileges User interaction EPSS 0.00621 Published 2023-07-27 Fixed in 1.11.5, 1.12.3 CWE-400