[GHSA-wfqx-gjrf-g28r] Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag#8628

adamwg wants to merge 1 commit into

adamwg/advisory-improvement-8628github/advisory-database:adamwg/advisory-improvement-8628from

adamwg-GHSA-wfqx-gjrf-g28rgithub/advisory-database:adamwg-GHSA-wfqx-gjrf-g28rCopy head branch name to clipboard