https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T19:30:12.852989+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-163120 EUVD-2026-163120 2026-10-18T19:30:12.856259+00:00 EUVD-2026-163120 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45810 fkie_cve-2023-45810 2026-10-18T19:30:12.856299+00:00

OpenFGA is a flexible authorization/permission engine built for developers and inspired by Google Zanzibar. Affected versions of OpenFGA are vulnerable to a denial of service attack. When a number of `ListObjects` calls are executed, in some scenarios, those calls are not releasing resources even after a response has been sent, and given a sufficient call volume the service as a whole becomes unresponsive. This issue has been addressed in version 1.3.4 and the upgrade is considered backwards compatible. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-hr4f-6jh8-f2vq GHSA-hr4f-6jh8-f2vq — OpenFGA DoS vulnerability 2026-10-18T19:30:12.856341+00:00

Affected: Go: github.com/openfga/openfga

## Overview OpenFGA is vulnerable to a DoS attack. When a number of ListObjects calls are executed, in some scenarios, those calls are not releasing resources even after a response has been sent, and the service as a whole becomes unresponsive.

## Fix Upgrade to v1.3.4. This upgrade is backwards compatible.

 https://cve.radiocsirt.org/vuln/gsd-2023-45810 gsd-2023-45810 2026-10-18T19:30:12.856378+00:00 gsd-2023-45810