open-feature
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| open-feature-operator | 2 | – | Sep 17, 2026 |
| flagd | 1 | – | Mar 11, 2026 |
Exploited and recent CVEs
- CVE-2026-54495 Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters 0.3%
- CVE-2026-31866 Allocation of Resources Without Limits or Throttling in flagd 0.5%
- CVE-2023-29018 OpenFeature Operator vulnerable to Cluster-level Privilege Escalation 0.7%