Skip to content
Openfga Helm Charts vulnerabilities
-
openfga, openfga helm charts +1 more
OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset
CVE-2026-55689
Fix available
6.8 Medium
-
openfga, openfga helm charts +1 more
OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions
CVE-2026-55170
Fix available
2.1 Low
-
openfga, openfga helm charts +1 more
OpenFGA: Cache-key delimiter injection in openfga/openfga shared-iterator and v2 iterator caches enables intra-store authorization-decision poisoning
CVE-2026-48096
Fix available
5.0 Medium
-
openfga, openfga helm charts +1 more
OpenFGA has Improper Policy Enforcement
CVE-2026-41131
Fix available
5.0 Medium
-
openfga, openfga helm charts +1 more
OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision
CVE-2026-34972
Fix available
5.0 Medium
-
openfga, openfga helm charts +1 more
OpenFGA Improper Policy Enforcement
CVE-2026-24851
Fix available
5.8 Medium
-
openfga, openfga helm charts +1 more
OpenFGA Improper Policy Enforcement
CVE-2025-64751
Fix available
5.8 Medium
-
openfga, openfga helm charts +1 more
OpenFGA Authorization Bypass (Check)
CVE-2025-55213
Fix available
5.8 Medium
-
openfga, openfga helm charts +1 more
OpenFGA Authorization Bypass
CVE-2025-48371
Fix available
5.8 Medium
-
openfga, openfga helm charts +1 more
OpenFGA Authorization Bypass
CVE-2025-46331
Fix available
5.8 Medium
-
openfga, openfga helm charts +1 more
OpenFGA Authorization Bypass
CVE-2025-25196
Fix available
5.8 Medium
-
openfga, openfga helm charts +1 more
OpenFGA Authorization Bypass
CVE-2024-56323
Fix available
5.8 Medium