flagd: Multiple Go Runtime CVEs Impact Security and Availability in github.com/open-feature/flagd/core

GHSA-4c5f-9mj4-m247 · GO-2026-4279 · Published 12/01/2026 · updated 03/03/2026

Kurz gesagt

GO-2026-4279 ist eine Schwachstelle (noch nicht bewertet) in github.com/open-feature/flagd/core, github.com/open-feature/flagd/flagd, github.com/open-feature/flagd/flagd-proxy.
Abhilfe: auf 0.13.1, 0.8.2 oder neuer aktualisieren.

Package	Affected versions	Patched versions
github.com/open-feature/flagd/core Go	`< 0.13.1`	`0.13.1`
github.com/open-feature/flagd/flagd Go	`< 0.13.1`	`0.13.1`
github.com/open-feature/flagd/flagd-proxy Go	`< 0.8.2`	`0.8.2`

Running one of these products? Scan your site to see whether it exposes a vulnerable version.