Skip to content
OpenAdvisories

Package · Go

github.com/openfga/openfga

27 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.1
    CVE-2026-55170

    OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions

    OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization decisions rely on case-sensitive user strings, the tuple, changelog, and authorization_model identifier columns ca…

    openfga openfga github.com/openfga/openfga Go