Skip to content
OpenAdvisories

Vendor

open-feature

3 known vulnerabilities.

Products

open-feature-operator 2 flagd 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-54495

    Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters

    The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with NAMESPACE/NAME syntax to reference a…

    open-feature open-feature-operator github.com/open-feature/open-feature-operator Go