Vulnerability index

Browse CVEs

26 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Helm Charts HIGH 8.1
CVE-2026-55689

OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, OpenFGA's OIDC authenticator skipped JWT audience validation whe…

Fix: 0.3.9 / 1.18.0+
Fix from $1,950 2026-07-09
Helm Charts MEDIUM 5.4
CVE-2026-55170

OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization deci…

Fix: 0.3.9 / 1.18.0+
Fix from $1,600 2026-07-09
Helm Charts MEDIUM 5.3
CVE-2026-48096

OpenFGA is an authorization/permission engine built for developers. Prior to version 1.16.0, when iterator caching is enabled, two distinct check req…

Fix: 0.3.5 / 1.16.0+
Fix from $1,600 2026-06-10
Helm Charts MEDIUM 5.0
CVE-2026-41131

OpenFGA is an authorization/permission engine built for developers. Prior to version 1.14.1, in specific scenarios, models using conditions with cach…

Fix: 0.3.1 / 1.14.1+
Fix from $1,600 2026-04-22
Openfga MEDIUM 6.5
CVE-2026-40293

OpenFGA is an authorization/permission engine built for developers. In versions 0.1.4 through 1.13.1, when OpenFGA is configured to use preshared-key…

Fix: 1.14.0+
Fix from $1,600 2026-04-17
Helm Charts HIGH 8.8
CVE-2026-34972

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. From 1.8.0 to 1.13.1…

Fix: 0.2.62 / 1.14.0+
Fix from $1,950 2026-04-06
Openfga CRITICAL 9.8
CVE-2026-33729

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. In versions prior to…

Fix: 1.13.1+
Fix from $2,300 2026-03-27
Helm Charts HIGH 8.8
CVE-2026-24851

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.8.5 to v1…

Fix: 0.2.51 / 1.11.3+
Fix from $1,950 2026-02-06
Helm Charts HIGH 8.8
CVE-2025-64751

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.4.0 to v1…

Fix: 0.2.49 / 1.11.1+
Fix from $1,950 2025-11-21
Helm Charts CRITICAL 9.8
CVE-2025-55213

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.9.3 to v1…

Fix: 0.2.42 / 1.9.5+
Fix from $2,300 2025-08-18
Helm Charts HIGH 8.8
CVE-2025-48371

OpenFGA is an authorization/permission engine. OpenFGA versions 1.8.0 through 1.8.12 (corresponding to Helm chart openfga-0.2.16 through openfga-0.2.…

Fix: 0.2.32 / 1.8.13+
Fix from $1,950 2025-05-22
Helm Charts CRITICAL 9.8
CVE-2025-46331

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.8.10 to v…

Fix: 0.2.29 / 1.8.11+
Fix from $2,300 2025-04-30
Helm Charts CRITICAL 9.8
CVE-2025-25196

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA < v1.8.4 (He…

Fix: 0.2.22 / 1.8.5+
Fix from $2,300 2025-02-19
Helm Charts CRITICAL 9.8
CVE-2024-56323

OpenFGA is an authorization/permission engine. IN OpenFGA v1.3.8 to v1.8.2 (Helm chart openfga-0.1.38 to openfga-0.2.19, docker v1.3.8 to v.1.8.2) a…

Fix: 0.2.19 / 1.8.3+
Fix from $2,300 2025-01-13
Openfga CRITICAL 9.8
CVE-2024-42473

OpenFGA is an authorization/permission engine. OpenFGA v1.5.7 and v1.5.8 are vulnerable to authorization bypass when calling Check API with a model t…

Mitigation only
Fix from $2,300 2024-08-12
Openfga CRITICAL 9.8
CVE-2024-31452

OpenFGA is a high-performance and flexible authorization/permission engine. Some end users of OpenFGA v1.5.0 or later are vulnerable to authorization…

Fix: 1.5.3+
Fix from $2,300 2024-04-16
Openfga MEDIUM 6.5
CVE-2024-23820

OpenFGA, an authorization/permission engine, is vulnerable to a denial of service attack in versions prior to 1.4.3. In some scenarios that depend on…

Fix: 1.4.3+
Fix from $1,600 2024-01-26
Openfga HIGH 7.5
CVE-2023-45810

OpenFGA is a flexible authorization/permission engine built for developers and inspired by Google Zanzibar. Affected versions of OpenFGA are vulnerab…

Fix: 1.3.4+
Fix from $1,950 2023-10-17
Openfga MEDIUM 5.9
CVE-2023-43645

OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA is vulnerable to a denial of service atta…

Fix: 1.3.2+
Fix from $1,600 2023-09-27
Openfga MEDIUM 6.5
CVE-2023-40579

OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. Some end users of OpenFGA v1.3.0 or earlier are v…

Fix: 1.3.1+
Fix from $1,600 2023-08-25
Openfga HIGH 7.5
CVE-2023-35933

OPenFGA is an open source authorization/permission engine built for developers. OpenFGA versions v1.1.0 and prior are vulnerable to a DoS attack when…

Fix: 1.1.1+
Fix from $1,950 2023-06-26
Openfga CRITICAL 9.8
CVE-2022-23542

OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. During an internal security assessment, it was di…

Fix: 0.3.1+
Fix from $2,300 2022-12-20
Openfga CRITICAL 9.8
CVE-2022-39352

OpenFGA is a high-performance authorization/permission engine inspired by Google Zanzibar. Versions prior to 0.2.5 are vulnerable to authorization by…

Fix: 0.2.5+
Fix from $2,300 2022-11-08
Openfga CRITICAL 9.8
CVE-2022-39341

OpenFGA is an authorization/permission engine. Versions prior to version 0.2.4 are vulnerable to authorization bypass under certain conditions. Users…

Fix: 0.2.4+
Fix from $2,300 2022-10-25
Openfga CRITICAL 9.8
CVE-2022-39342

OpenFGA is an authorization/permission engine. Versions prior to version 0.2.4 are vulnerable to authorization bypass under certain conditions. Users…

Fix: 0.2.4+
Fix from $2,300 2022-10-25
Openfga MEDIUM 5.3
CVE-2022-39340

OpenFGA is an authorization/permission engine. Prior to version 0.2.4, the `streamed-list-objects` endpoint was not validating the authorization head…

Fix: 0.2.4+
Fix from $1,600 2022-10-25