github.com/crossplane/crossplane
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag | github.com/crossplane/crossplane/v2github.com/crossplane/crossplane | Go | Critical | Fix reported | |
| Crossplane-runtime contains Improper Input Validation via Compositions | github.com/crossplane/crossplane | Go | Medium | Fix reported | |
| github.com/crossplane/crossplane: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses | github.com/crossplane/crossplane | Go | Critical | Fix reported | |
| Denial of service from large image | github.com/crossplane/crossplane | Go | Low | Fix reported | |
| Possible image tampering from missing image validation for Packages | github.com/crossplane/crossplane | Go | High | Fix reported |