Vulnerabilities

TI-2026-39341 CVE-2026-54495 · GHSA-398h-7f66-3h4p

Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters

LOW 20

The OpenFeature Operator allows users to expose feature flags to applications.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00306 Published 2026-09-17 No fix listed CWE-668

TI-2026-24418 CVE-2026-31866 · GHSA-rmrf-g9r3-73pm

LOW 39

flagd is a feature flag daemon with a Unix philosophy.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00477 Published 2026-03-11 Fixed in 0.14.2 CWE-770

TI-2023-13479 CVE-2023-29018 · GHSA-cwf6-xj49-wp83

MEDIUM 41

The OpenFeature Operator allows users to expose feature flags to applications.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00659 Published 2023-04-14 Fixed in 0.2.32 CWE-269