CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

346 matches found

Vulnrichment•added 2025/11/21 1:24 a.m.•4 views

CVE-2025-64751 OpenFGA Improper Policy Enforcement

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.4.0 to v1.11.0 openfga-0.1.34 = Helm chart = openfga-0.2.48, v.1.4.0 = docker = v.1.11.0 are vulnerable to improper policy enforcement when certain Check and...

5.8CVSS6.5AI score0.00261EPSS

Exploits0References2

CVE•added 2025/11/21 1:24 a.m.•25 views

CVE-2025-64751

CVE-2025-64751 affects OpenFGA v1.4.0–v1.11.0 (openfga-0.1.34–0.2.48 Helm; v1.4.0–v1.11.0 Docker). It is due to improper policy enforcement when certain Check and ListObject calls are executed, with patches available in v1.11.1. Impact is described as high in CVSS metrics (base score 8.8; confide...

8.8CVSS6.5AI score0.00261EPSS

Exploits0References2Affected Software2

EUVD•added 2025/11/21 1:24 a.m.•5 views

EUVD-2025-198364

5.8CVSS6.3AI score0.00261EPSS

Exploits0References3

CNNVD•added 2025/11/21 12:0 a.m.•5 views

OpenFGA 授权问题漏洞

OpenFGA is OpenFGA open source a high performance and flexible authorization/licensing engine built for developers and inspired by Google Zanzibar. An authorization issue vulnerability exists in OpenFGA versions v1.4.0 through v1.11.0, which stems from improper policy enforcement and could lead t...

8.8CVSS6.4AI score0.00261EPSS

Exploits0References3

OSV•added 2025/11/20 10:48 p.m.•4 views

GHSA-2C64-VMV2-HGFC OpenFGA Improper Policy Enforcement

Overview OpenFGA v1.4.0 to v1.11.0 openfga-0.1.34 = Helm chart = openfga-0.2.48, v.1.4.0 = docker = v.1.11.0 are vulnerable to improper policy enforcement when certain Check and ListObject calls are executed. Am I Affected? You are affected by this vulnerability if you meet the following...

5.8CVSS6.8AI score0.00261EPSS

Exploits0References4