Flagsmith/flagsmith

Flagsmith/flagsmith

GitHubGitHub
GitHubgithub.com
www.flagsmith.comwww.flagsmith.com
Releases545
Frequency5 days 10 hours
Last Release
Stars6.47K
Flagsmith is an open source feature flagging and remote config service. Self-host or use our hosted version at https://app.flagsmith.com.
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2024-52872NVD↗
< 2.134.17.5 HIGH—

In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions.

CVE-2024-52871NVD↗
< 2.134.17.5 HIGH—

In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.