Flagsmith vulnerabilities

Products

• Flagsmith 2

Newest

• flagsmith In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions. CVE-2024-52872 7.5 HighNovember 17, 2024
• flagsmith In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting. CVE-2024-52871 7.5 HighNovember 17, 2024