Openfga vulnerabilities

Products

• Openfga 27
• Helm Charts 12

Newest

• openfga OpenFGA: ListUsers returns a deliberately-excluded user (authorization-decision over-inclusion) when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that… CVE-2026-61709 Fix available 5.3 MediumSeptember 16, 2026
• openfga, openfga helm charts +1 more OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset CVE-2026-55689 Fix available 6.8 MediumJune 19, 2026
• openfga, openfga helm charts +1 more OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions CVE-2026-55170 Fix available 2.1 LowJune 18, 2026
• openfga, openfga helm charts +1 more OpenFGA: Cache-key delimiter injection in openfga/openfga shared-iterator and v2 iterator caches enables intra-store authorization-decision poisoning CVE-2026-48096 Fix available 5.0 MediumJune 10, 2026
• openfga, openfga helm charts +1 more OpenFGA has Improper Policy Enforcement CVE-2026-41131 Fix available 5.0 MediumApril 21, 2026
• openfga, red hat multicluster global hub 1.7.0, advanced cluster management for kubernetes 2.14 +3 more +5 more OpenFGA Playground Preshared Key Exposure CVE-2026-40293 Fix available 6.5 MediumApril 8, 2026
• openfga, openfga helm charts +1 more OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision CVE-2026-34972 Fix available 5.0 MediumApril 6, 2026
• openfga OpenFGA has an Authorization Bypass through cached keys CVE-2026-33729 Fix available 5.8 MediumMarch 26, 2026
• openfga, openfga helm charts +1 more OpenFGA Improper Policy Enforcement CVE-2026-24851 Fix available 5.8 MediumFebruary 5, 2026
• openfga, openfga helm charts +1 more OpenFGA Improper Policy Enforcement CVE-2025-64751 Fix available 5.8 MediumNovember 20, 2025
• openfga, openfga helm charts +1 more OpenFGA Authorization Bypass (Check) CVE-2025-55213 Fix available 5.8 MediumAugust 18, 2025
• openfga, openfga helm charts +1 more OpenFGA Authorization Bypass CVE-2025-48371 Fix available 5.8 MediumMay 22, 2025
• openfga, openfga helm charts +1 more OpenFGA Authorization Bypass CVE-2025-46331 Fix available 5.8 MediumApril 30, 2025
• openfga, openfga helm charts +1 more OpenFGA Authorization Bypass CVE-2025-25196 Fix available 5.8 MediumFebruary 19, 2025
• openfga, openfga helm charts +1 more OpenFGA Authorization Bypass CVE-2024-56323 Fix available 5.8 MediumJanuary 13, 2025
• openfga OpenFGA Authorization Bypass CVE-2024-42473 Fix available 7.5 HighAugust 9, 2024
• openfga OpenFGA Authorization Bypass CVE-2024-31452 Fix available 8.1 HighApril 16, 2024
• openfga OpenFGA DoS CVE-2024-23820 Fix available 5.3 MediumJanuary 26, 2024
• openfga OpenFGA denial of service CVE-2023-45810 Fix available 5.3 MediumOctober 17, 2023
• openfga Denial of service from circular relationship definitions in OpenFGA CVE-2023-43645 Fix available 5.9 MediumSeptember 26, 2023
• openfga OpenFGA Authorization Bypass CVE-2023-40579 Fix available 6.5 MediumAugust 25, 2023
• openfga OpenFGA denial of service die to circular relationship CVE-2023-35933 Fix available 5.9 MediumJune 26, 2023
• openfga OpenFGA Authorization Bypass CVE-2022-23542 Fix available 7.7 HighDecember 20, 2022
• openfga OpenFGA Authorization Bypass CVE-2022-39352 Fix available 4.8 MediumNovember 8, 2022
• openfga OpenFGA Authorization Bypass CVE-2022-39342 Fix available 5.9 MediumOctober 25, 2022
• openfga OpenFGA Authorization Bypass CVE-2022-39341 Fix available 5.9 MediumOctober 25, 2022
• openfga OpenFGA Information Disclosure CVE-2022-39340 Fix available 5.3 MediumOctober 25, 2022