Lucene search
K

9 matches found

OSV
OSV
added 2026/04/22 7:43 p.m.4 views

GHSA-57J5-QWP2-VQP6 OpenFGA has Improper Policy Enforcement

Description In OpenFGA, in specific scenarios, models using conditions with caching enabled can result in two different check requests producing the same cache key. This could result in OpenFGA reusing an earlier cached result for a subsequent request. Am I Affected? Users are affected if their...

5CVSS5.8AI score0.00145EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/22 7:43 p.m.2 views

EUVD-2026-24573

OpenFGA has Improper Policy Enforcement...

5CVSS5.7AI score0.00145EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/03/27 12:27 a.m.24 views

CVE-2026-33729 OpenFGA has an Authorization Bypass through cached keys

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. In versions prior to 1.13.1, under specific conditions, models using conditions with caching enabled can result in two different check requests producing the same cache...

5.8CVSS0.00241EPSS
Exploits0References3
OSV
OSV
added 2026/03/26 5:21 p.m.0 views

GHSA-H6C8-CWW8-35HF OpenFGA has an Authorization Bypass through cached keys

Description In OpenFGA, under specific conditions, models using conditions with caching enabled can result in two different check requests producing the same cache key. This can result in OpenFGA reusing an earlier cached result for a different request. Am I Affected? Users are affected if the...

5.8CVSS5.9AI score0.00241EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/03/26 12:0 a.m.2 views

PT-2026-28515

Name of the Vulnerable Software and Affected Versions OpenFGA versions prior to 1.13.1 Description OpenFGA is a high-performance and flexible authorization/permission engine. Under specific conditions, models using conditions with caching enabled can result in two different check requests produci...

5.8CVSS5.9AI score0.00241EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-51309

Malicious code in bioql PyPI...

5.9CVSS6.1AI score0.00316EPSS
Exploits0References2
OSV
OSV
added 2023/11/08 10:15 a.m.1 views

CVE-2022-48613

Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition evaluation bypassed...

5.9CVSS5.8AI score0.00316EPSS
Exploits0References2
NVD
NVD
added 2023/11/08 10:15 a.m.14 views

CVE-2022-48613

Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition evaluation bypassed...

5.9CVSS0.00316EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/11/08 9:8 a.m.12 views

CVE-2022-48613

Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition evaluation bypassed...

6.8AI score0.00316EPSS
Exploits0References2
Rows per page
Query Builder