unleash vulnerabilities

2 known vulnerabilities in unleash from Unleash. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  unleash: Authorization Bypass Through User-Controlled Key

  CVE-2026-77426Sep 22, 2026Unleash

  Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contains five authorization vulnerabilities. POST /api/admin/segments/strategies assigns the Promise returned by hasPermission without awaiting it, allowing authentica

• 7.5 High severity

  unleash: Uncontrolled Recursion

  CVE-2026-63462Aug 21, 2026Unleash

  Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the shared OpenAPI validation error path in src/lib/error/bad-data-error.ts passes a raw request value from lodash.get to JSON.stringify in genericErrorMessage and fromOpe