Releases525
Frequency5 days 13 hours
Last Release
Stars6.4K
Flagsmith is an open source feature flagging and remote config service. Self-host or use our hosted version at https://app.flagsmith.com.

CVE History

CVEPublishedCVSS v3CVSS v2
7.5 HIGH

In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions.

7.5 HIGH

In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.