MEDIUM4.3Go
GHSA-398h-7f66-3h4p· CVE-2026-54495, GO-2026-5998open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters
Modified: 7/21/2026
package
Go/github.com/open-feature/open-feature-operator
pkg:go/github.com/open-feature/open-feature-operator
HIGH8.8Go
GHSA-cwf6-xj49-wp83· CVE-2023-29018, GO-2023-1721OpenFeature Operator vulnerable to Cluster-level Privilege Escalation
Modified: 8/20/2024
—Go
GO-2023-1721· CVE-2023-29018, GHSA-cwf6-xj49-wp83OpenFeature Operator vulnerable to Cluster-level Privilege Escalation in github.com/open-feature/open-feature-operator
Modified: 3/3/2026
—Go
GO-2026-5998· CVE-2026-54495, GHSA-398h-7f66-3h4popen-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters in github.com/open-feature/open-feature-operator
Modified: 7/21/2026