Vulnerabilities

TI-2026-67558 CVE-2026-105163 · GHSA-92mr-7mjc-w93g

crossplane crossplane-runtime ImageConfig client.go Get toctou

LOW 36

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00322 Published 2026-10-04 Partial fix · 2.2.3, 2.3.3 +1 CWE-362

TI-2023-19875 CVE-2023-38495 · GHSA-pj4x-2xr5-w87m

MEDIUM 44

Crossplane is a framework for building cloud native control planes without needing to write code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2023-07-27 Fixed in 1.11.5, 1.12.3 CWE-20

TI-2023-19333 CVE-2023-37900 · GHSA-68p4-95xf-7gx8

LOW 17

Crossplane is a framework for building cloud native control planes without needing to write code.

CVSS 3.1LOW 3.4 Network High privileges User interaction EPSS 0.00621 Published 2023-07-27 Fixed in 1.11.5, 1.12.3 CWE-400

TI-2023-12212 CVE-2023-27484 · GHSA-v829-x6hh-cqfq

LOW 29

crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks.

CVSS 3.1MEDIUM 6.2 Adjacent network High privileges No interaction EPSS 0.00678 Published 2023-03-09 Fixed in 1.9.2, 1.10.3 +1 CWE-20

TI-2023-12211 CVE-2023-27483 · GHSA-vfvj-3m3g-m532

LOW 34

crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00798 Published 2023-03-09 Fixed in 0.19.2, 0.16.1 CWE-20