All products

github.com/open-feature/open-feature-operator

Go · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clustersCVE-2026-54495 · GHSA-398H-7F66-3H4PVersion ranges need review. github.com/open-feature/open-feature-operator Go Medium No fix reported
OpenFeature Operator vulnerable to Cluster-level Privilege EscalationCVE-2023-29018 · GHSA-CWF6-XJ49-WP83Version ranges need review. github.com/open-feature/open-feature-operator Go High Fix reported