Open-source feature management solution built for developers.
APACHE-2.0 License
Bot releases are visible (Hide)
Published by github-actions[bot] 2 months ago
SCIM support for Microsoft Entra and Okta.
Simplified setup of self-hosted instances by having SSO available since the first time Unleash boots.
In previous versions of Unleash, when a project was deleted, the associated SDK tokens were not removed. This issue has been addressed in the 6.1 version of Unleash.
Unfortunately, if you deleted a project in the past without manually removing the associated tokens, these "orphaned" tokens were automatically converted to “wildcard” tokens, granting access to all feature flags across all projects.
Our assessment indicates this poses a minor security concern due to the following reasons:
In the SDK tokens overview, orphaned tokens are flagged with a warning. We recommend discontinuing the use of these tokens and creating new, dedicated tokens instead.
With the latest version, when a project is deleted, all API tokens scoped to that project will be removed as well. If you need further assistance, please contact customer support.
Published by github-actions[bot] 4 months ago