CVE-2023-27483
2 advisories.
Go/github.com/crossplane/crossplane-runtime CVE-2023-27483: medium 5.9, EPSS 0.80%
fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime
Action: Upgrade github.com/crossplane/crossplane-runtime to 0.16.1 or later.
go get github.com/crossplane/crossplane-runtime@v0.19.2go get github.com/crossplane/crossplane-runtime@v0.16.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.17.0 | 0.19.2 | - |
| 0.6.0 | 0.16.1 | - |
Fixed versions
| 0.19.2 | 0.16.1 |
Sources
- osv: GHSA-vfvj-3m3g-m532
- https://github.com/crossplane/crossplane-runtime/security/advisories/GHSA-vfvj-3m3g-m532
- https://nvd.nist.gov/vuln/detail/CVE-2023-27483
- https://github.com/crossplane/crossplane-runtime/commit/53508a9f4374604db140dd8ab2fa52276441e738
- https://github.com/crossplane/crossplane-runtime/commit/f67177024d906aaf5e13ee7cd470b4e87a9fef40
- https://github.com/crossplane/crossplane-runtime
- https://pkg.go.dev/vuln/GO-2023-1623
CVE-2023-27483 · published · modified · JSON
Go/github.com/crossplane/crossplane-runtime CVE-2023-27483: unknown, EPSS 0.80%
Out-of-memory panic in github.com/crossplane/crossplane-runtime
Action: Upgrade github.com/crossplane/crossplane-runtime to 0.16.1 or later.
go get github.com/crossplane/crossplane-runtime@v0.16.1go get github.com/crossplane/crossplane-runtime@v0.19.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.6.0 | 0.16.1 | - |
| 0.17.0 | 0.19.2 | - |
Fixed versions
| 0.16.1 | 0.19.2 |
Sources
- osv: GO-2023-1623
- https://github.com/crossplane/crossplane-runtime/security/advisories/GHSA-vfvj-3m3g-m532
- https://github.com/crossplane/crossplane-runtime/commit/53508a9f4374604db140dd8ab2fa52276441e738
CVE-2023-27483 · published · modified · JSON