open-feature github.com/open-feature/flagd/flagd vulnerabilities

Latest open-feature github.com/open-feature/flagd/flagd CVEs

Newest publication first

1. CVE-2026-31866 Allocation of Resources Without Limits or Throttling in flagd

   Published 2026-03-11

   High·CVSS 7.5 EPSS 0.48%

   flagd is a feature flag daemon with a Unix philosophy. Prior to 0.14.2, flagd exposes OFREP (/ofrep/v1/evaluate/...) and gRPC (evaluation.v1, evaluation.v2) endpoints for feature flag evaluation. These endpoints are designed to be publicly accessible by client applications. The e...

2. GHSA-4c5f-9mj4-m247 flagd: Multiple Go Runtime CVEs Impact Security and Availability

   Published 2026-01-05

   Unknown

   Summary In 2025, several vulnerabilities in the Go Standard Library were disclosed, impacting Go-based applications like flagd (the evaluation engine for OpenFeature). These CVEs primarily focus on Denial of Service (DoS) through resource exhaustion and Race Conditions in databas...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.