CVE-2023-45810 OpenFGA denial of service

OpenFGA is a flexible authorization/permission engine built for developers and inspired by Google Zanzibar. Affected versions of OpenFGA are vulnerable to a denial of service attack. When a number of ListObjects calls are executed, in some scenarios, those calls are not releasing resources even...

CVE-2023-45810

OpenFGA (github.com/openfga/openfga) DoS vulnerability: certain ListObjects calls can fail to release resources, leading to service unresponsiveness under high request volume. Affected OpenFGA versions are addressed by upgrading to v1.3.4, a backwards-compatible fix. Public descriptions from mult...