Github.Com Open-Feature Flagd Flagd vulnerabilities

2 known vulnerabilities affecting github.com/open-feature_flagd_flagd.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH2

Vulnerabilities

Page 1 of 1

CVE-2026-31866HIGH≥ 0, < 0.14.22026-03-11

CVE-2026-31866 [HIGH] CWE-770 flagd Vulnerable to Allocation of Resources Without Limits or Throttling flagd Vulnerable to Allocation of Resources Without Limits or Throttling ## Details flagd exposes OFREP (`/ofrep/v1/evaluate/...`) and gRPC (`evaluation.v1`, `evaluation.v2`) endpoints for feature flag evaluation. These endpoints are designed to be publicly accessible by client applications. The evaluation context included in request payloads is read into memory without any size restriction.

CVE-2025-47907HIGHCVSS 7.0≥ 0, < 0.13.12026-01-05

CVE-2025-47907 [HIGH] CWE-20 flagd: Multiple Go Runtime CVEs Impact Security and Availability flagd: Multiple Go Runtime CVEs Impact Security and Availability ### Summary In 2025, several vulnerabilities in the Go Standard Library were disclosed, impacting Go-based applications like flagd (the evaluation engine for OpenFeature). These CVEs primarily focus on Denial of Service (DoS) through resource exhaustion and Race Conditions in database handling. | CVE ID | Impacted Package | Severity | De