{"action":"Upgrade github.com/crossplane/crossplane to 1.15.6 or later.","affected":[{"fixed":"1.15.6","introduced":"1.15.5"},{"fixed":"1.16.3","introduced":"1.16.2"},{"fixed":"1.17.2","introduced":"1.17.1"}],"component":"github.com/crossplane/crossplane","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.15.6","1.16.3","1.17.2"],"ghsa_id":"GHSA-7h65-4p22-39j6","id":"tcs_01M5KF20FJQYQXYVDX2GHZGHFW","modified_at":"2026-08-07T08:12:31.478837962Z","published_at":"2024-10-25T19:42:31Z","references":["https://osv.dev/vulnerability/GHSA-7h65-4p22-39j6","https://github.com/crossplane/crossplane/security/advisories/GHSA-7h65-4p22-39j6","https://github.com/crossplane/crossplane"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7h65-4p22-39j6","url":"https://osv.dev/vulnerability/GHSA-7h65-4p22-39j6"}],"summary":"github.com/crossplane/crossplane: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses"}