Denial Of Service (DoS)

2023-03-1212:00:19

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of service

vulnerability

crossplane

crossplane-runtime

memory consumption

application crash

EPSS

0.001

Percentile

31.6%

JSON

github.com/crossplane/crossplane is vulnerable to Denial Of Service (DoS). The vulnerability exists due to the github.com/crossplane/crossplane-runtime dependency used in the library, which allows an attacker to insert elements into arrays at an arbitrary index, causing excessive memory consumption, resulting in an application crash.