CVE-2026-27880
CVE-2026-27880 · OpenFeature evaluation API reads input data with no bounds
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
CVSS 7.5 · High · EPSS 0.8% · Fix available
- Published
- Updated
Stack: system · applications
Affected products and versions
grafana
- Versions
- ≥ v12.1.0, < v12.1.10: Affected (semver)
- ≥ v12.2.0, < v12.2.8: Affected (semver)
- ≥ v12.3.0, < v12.3.6: Affected (semver)
- ≥ v12.4.0, < v12.4.2: Affected (semver)
Update to v12.1.10; Update to v12.2.8; Update to v12.3.6; Update to v12.4.2
grafana Ubuntu:16.04:LTS
- Versions
- 2.6.0+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published