Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-27880

OpenFeature evaluation API reads input data with no bounds

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GRAFANA

Description

The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Grafana Grafana

Default version status: unaffected

  • v12.1.0 to < v12.1.10affected
  • v12.2.0 to < v12.2.8affected
  • v12.3.0 to < v12.3.6affected
  • v12.4.0 to < v12.4.2affected

References