Vulnerabilities

TI-2026-54011 CVE-2026-77426 · GHSA-72h8-wp98-7hch

Unleash: Missing await on permission check + cross-project IDOR in admin API

LOW 32

Unleash is an open-source feature management platform.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00484 Published 2026-09-22 Fixed in 8.0.3 CWE-639

TI-2026-54010 CVE-2026-77425 · GHSA-5ffh-6f9q-5hhr

MEDIUM 53

Unleash is an open-source feature management platform.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00325 Published 2026-09-22 Fixed in 8.0.3 CWE-639

TI-2026-53733 CVE-2026-76910 · GHSA-8xcj-9hfr-fh9j

MEDIUM 57

Unleash is an open-source feature management platform.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00414 Published 2026-09-22 Fixed in 8.0.3 CWE-639

TI-2026-53732 CVE-2026-76909 · GHSA-7hvx-28gp-mf6j

LOW 12

Unleash is an open-source feature management platform.

CVSS 4.0LOW 2.1 Network Low privileges User interaction EPSS 0.00467 Published 2026-09-22 Fixed in 8.0.3 CWE-79

TI-2026-45232 CVE-2026-63466 · GHSA-w4mq-xh27-6xpx

LOW 19

Unleash is an open-source feature management platform.

CVSS 3.1MEDIUM 4.1 Network Low privileges User interaction EPSS 0.00319 Published 2026-08-21 Fixed in 8.0.3 CWE-116

TI-2026-45230 CVE-2026-63462 · GHSA-r5pq-6chh-j3xp

HIGH 72

Unleash is an open-source feature management platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00699 Published 2026-08-21 Fixed in 7.5.2, 7.6.5 +1 CWE-674

TI-2026-45005 CVE-2026-63004 · GHSA-5vf6-jrqr-78fj

MEDIUM 58

Unleash is an open-source feature management platform.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00385 Published 2026-08-21 Fixed in 7.5.2, 7.6.5 +1 CWE-918