https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T23:08:37.443321+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-39341 CVE-2022-39341 — OpenFGA Authorization Bypass 2026-10-09T23:08:37.460552+00:00

Affected: openfga

OpenFGA is an authorization/permission engine. Versions prior to version 0.2.4 are vulnerable to authorization bypass under certain conditions. Users who have wildcard (`*`) defined on tupleset relations in their authorization model are vulnerable. Version 0.2.4 contains a patch for this issue.