CVE-2023-27484

crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. In affected versions an already highly privileged user able to create or update Compositions can specify an arbitrarily high index in a patch's "ToFieldPath", which could lead to...

PT-2023-21160

Name of the Vulnerable Software and Affected Versions crossplane-runtime versions prior to 1.11.2 crossplane-runtime versions prior to 1.10.3 crossplane-runtime versions prior to 1.9.2 Description The issue affects crossplane-runtime, a set of Go libraries used to build Kubernetes controllers in...

CVE-2023-27484: Uncontrolled Resource Consumption

crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. In affected versions an already highly privileged user able to create or update Compositions can specify an arbitrarily high index in a patch's ToFieldPath, which could lead to...