Skip to content
OpenAdvisories

Package · Go

github.com/openfga/openfga

27 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2024-42473

    OpenFGA Authorization Bypass

    OpenFGA is an authorization/permission engine. OpenFGA v1.5.7 and v1.5.8 are vulnerable to authorization bypass when calling Check API with a model that uses `but not` and `from` expressions and a userset. Users should downgrade to v1.5.6 as soon as possible.…

    openfga openfga github.com/openfga/openfga Go
  • High 8.1
    CVE-2024-31452

    OpenFGA Authorization Bypass

    OpenFGA is a high-performance and flexible authorization/permission engine. Some end users of OpenFGA v1.5.0 or later are vulnerable to authorization bypass when calling Check or ListObjects APIs. You are very likely affected if your model involves exclusion …

    openfga openfga github.com/openfga/openfga Go
  • High 7.7
    CVE-2022-23542

    OpenFGA Authorization Bypass

    OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. During an internal security assessment, it was discovered that OpenFGA version 0.3.0 is vulnerable to authorization bypass under certain conditions. This issue…

    openfga openfga github.com/openfga/openfga Go