flagd: Multiple Go Runtime CVEs Impact Security and Availability in github.com/open-feature/flagd/core

GHSA-4c5f-9mj4-m247 · GO-2026-4279 · Published 12/01/2026 · updated 03/03/2026

In short

GO-2026-4279 is a not yet rated vulnerability affecting github.com/open-feature/flagd/core, github.com/open-feature/flagd/flagd, github.com/open-feature/flagd/flagd-proxy.
Fix: update to 0.13.1, 0.8.2 or later.

Package	Affected versions	Patched versions
github.com/open-feature/flagd/core Go	`< 0.13.1`	`0.13.1`
github.com/open-feature/flagd/flagd Go	`< 0.13.1`	`0.13.1`
github.com/open-feature/flagd/flagd-proxy Go	`< 0.8.2`	`0.8.2`

Running one of these products? Scan your site to see whether it exposes a vulnerable version.