Skip to content
OpenAdvisories

Vendor

open-feature

3 known vulnerabilities.

Products

open-feature-operator 2 flagd 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-31866

    Allocation of Resources Without Limits or Throttling in flagd

    flagd is a feature flag daemon with a Unix philosophy. Prior to 0.14.2, flagd exposes OFREP (/ofrep/v1/evaluate/...) and gRPC (evaluation.v1, evaluation.v2) endpoints for feature flag evaluation. These endpoints are designed to be publicly accessible by clien…

    open-feature flagd github.com/open-feature/flagd/flagd Go
  • High 8.1
    CVE-2023-29018

    OpenFeature Operator vulnerable to Cluster-level Privilege Escalation

    The OpenFeature Operator allows users to expose feature flags to applications. Assuming the pre-existence of a vulnerability that allows for arbitrary code execution, an attacker could leverage the lax permissions configured on `open-feature-operator-controll…

    open-feature open-feature-operator github.com/open-feature/open-feature-operator Go