GO-2026-5998 open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters in github.com/open-feature/open-feature-operator

open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters in github.com/open-feature/open-feature-operator...

GO-2026-4279 flagd: Multiple Go Runtime CVEs Impact Security and Availability in github.com/open-feature/flagd/core

flagd: Multiple Go Runtime CVEs Impact Security and Availability in github.com/open-feature/flagd/core...

EUVD-2015-1415

Malware in sbrugna...

EUVD-2022-42337

Malicious code in bioql PyPI...

Privilege Escalation

github.com/open-feature/open-feature-operator is vulnerable to Privilege Escalation. The vulnerability exists due to lack of restrictions configured on open-feature-operator-controller-manager which allows a malicious attacker to gain access and read cluster data including secrets...

CVE-2023-29018: Improper Privilege Management

The OpenFeature Operator allows users to expose feature flags to applications. Assuming the pre-existence of a vulnerability that allows for arbitrary code execution, an attacker could leverage the lax permissions configured on open-feature-operator-controller-manager to escalate the privileges o...

GHSA-CWF6-XJ49-WP83 OpenFeature Operator vulnerable to Cluster-level Privilege Escalation

Impact On a node controlled by an attacker or malicious user, the lax permissions configured on open-feature-operator-controller-manager can be used to further escalate the privileges of any service account in the cluster. The increased privileges could be used to modify cluster state, leading to...

CVE-2022-39892

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature...

Samsung Pass 授权问题漏洞

SAMSUNG Pass is a secure and easy way to log in to websites and applications on cell phones using biometrics from Samsung South Korea. A security vulnerability exists in Samsung Pass versions prior to 4.0.05.1, which stems from incorrect access control and can be exploited by an attacker to gain...

CVE-2022-39892

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature...

CVE-2022-39892: Improper Authentication

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature...

CVE-2022-39892

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature...

PT-2022-25085 · Samsung · Samsung Pass

Name of the Vulnerable Software and Affected Versions: Samsung Pass versions prior to 4.0.05.1 Description: The issue is related to improper access control, allowing attackers to gain unauthenticated access through the keep open feature. Recommendations: For versions prior to 4.0.05.1, update to...