Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/07 6:5 p.m.19 views

GHSA-JWVJ-G8PC-CX45 OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision

Description In OpenFGA, under specific conditions, BatchCheck calls with multiple checks sent for the same object, relation, and user combination can result in improper policy enforcement. Am I affected? You are affected if you meet the following preconditions: 1. You execute BatchCheck operation...

5CVSS5.9AI score0.00211EPSS
SaveExploits0References3
Rows per page
Query Builder