CVE-2026-54495
2 advisories.
Go/github.com/open-feature/open-feature-operator CVE-2026-54495: medium 4.3, EPSS 0.31%
open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.9.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-398h-7f66-3h4p
- https://github.com/open-feature/open-feature-operator/security/advisories/GHSA-398h-7f66-3h4p
- https://github.com/open-feature/open-feature-operator/issues/847
- https://github.com/open-feature/open-feature-operator
CVE-2026-54495 · published · modified · JSON
Go/github.com/open-feature/open-feature-operator CVE-2026-54495: unknown, EPSS 0.31%
open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters in github.com/open-feature/open-feature-operator
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-5998
- https://github.com/open-feature/open-feature-operator/security/advisories/GHSA-398h-7f66-3h4p
- https://github.com/open-feature/open-feature-operator/issues/847
CVE-2026-54495 · published · modified · JSON