crossplane/crossplane-runtime Security Advisories | GitStock

high2026-08-27

Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature check

GHSA-mf7q-r4rv-jv94

medium2023-03-13

fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime

GHSA-vfvj-3m3g-m532 · CVE-2023-27483