github.com/crossplane/crossplane/v2

Go · Package

1 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tagGHSA-WFQX-GJRF-G28R · GO-2026-5709Version ranges need review.	github.com/crossplane/crossplane/v2 github.com/crossplane/crossplane	Go	Critical	Fix reported	2026-09-30