Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2023-1980" }