crossbeam project crossbeam

Name: crossbeam project crossbeam
Brand: crossbeam project

productUS

cpe:2.3:a:crossbeam_project:crossbeam:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

3critical1high0medium0low

updated 2026-10-28

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-15254US	critical9.8	2.70% (86th)	—	0.4.4	2020-10-16	< 0.4.4
CVE-2021-32810US	critical9.8	1.91% (80th)	—	0.8.1	2021-08-02	2 versions
CVE-2018-20996US	critical9.8	1.74% (78th)	—	0.4.1	2019-08-26	< 0.4.1
CVE-2022-23639US	high8.1	1.23% (69th)	—	0.8.7	2022-02-15	< 0.8.7

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2 CVEs
CWE-131Incorrect Calculation of Buffer Size1 CVEs
CWE-401Missing Release of Memory after Effective Lifetime1 CVEs
CWE-415Double Free1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.