github.com/open-feature/flagd/flagd

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 7.5

CVE-2026-31866

Allocation of Resources Without Limits or Throttling in flagd

flagd is a feature flag daemon with a Unix philosophy. Prior to 0.14.2, flagd exposes OFREP (/ofrep/v1/evaluate/...) and gRPC (evaluation.v1, evaluation.v2) endpoints for feature flag evaluation. These endpoints are designed to be publicly accessible by clien…

open-feature flagd github.com/open-feature/flagd/flagd Go

Mar 11, 2026
High —

GHSA-4c5f-9mj4-m247

flagd: Multiple Go Runtime CVEs Impact Security and Availability

### Summary In 2025, several vulnerabilities in the Go Standard Library were disclosed, impacting Go-based applications like flagd (the evaluation engine for OpenFeature). These CVEs primarily focus on Denial of Service (DoS) through resource exhaustion and R…

github.com/open-feature/flagd/flagd github.com/open-feature/flagd/flagd-proxy github.com/open-feature/flagd/core Go

Jan 5, 2026