https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:09:54 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-kq21500 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: grafana</p> <p>Package grafana version 12.3.10-r1 fixes 15 vulnerabilities: ghsa-r277-6w6q-xmqw, ghsa-jpcw-4wr7-c3vq, ghsa-gcjh-h69q-9w9g, CVE-2026-21728, CVE-2026-28377...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: grafana</p> <p>Package grafana version 12.3.10-r1 fixes 15 vulnerabilities: ghsa-r277-6w6q-xmqw, ghsa-jpcw-4wr7-c3vq, ghsa-gcjh-h69q-9w9g, CVE-2026-21728, CVE-2026-28377...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-kq21500 https://cve.radiocsirt.org/vuln/euvd-2026-335597 EUVD-2026-335597 https://cve.radiocsirt.org/vuln/euvd-2026-335597 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55170 <p>OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization decisions rely on case-sensitive user strings, the tuple, changelog, and authorization_model identifier columns can compare case-distinct values such as user:Alice and user:alice as equivalent, causing two distinct check requests to return the same response. This issue is fixed in 1.18.0.</p> <p>OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization decisions rely on case-sensitive user strings, the tuple, changelog, and authorization_model identifier columns can compare case-distinct values such as user:Alice and user:alice as equivalent, causing two distinct check requests to return the same response. This issue is fixed in 1.18.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-55170 https://cve.radiocsirt.org/vuln/ghsa-cf98-j28v-49v6 <p><strong>Affected:</strong> Go: github.com/openfga/openfga</p> <p>## Description</p> <p>In OpenFGA, when MySQL is being used as the datastore, two distinct check requests can return the same response.</p> <p>## Preconditions</p> <p>This applies if the following preconditions are met:</p> <p>1. You run OpenFGA with MySQL as the datastore 2. Your authorization decisions rely on case-sensitive user strings.</p> <p>## Fix Upgrade to OpenFGA 1.18.0 or greater.</p> <p>## Acknowledgements OpenFGA would like to thank @sahajamoth for the detailed report.</p> <p><strong>Affected:</strong> Go: github.com/openfga/openfga</p> <p>## Description</p> <p>In OpenFGA, when MySQL is being used as the datastore, two distinct check requests can return the same response.</p> <p>## Preconditions</p> <p>This applies if the following preconditions are met:</p> <p>1. You run OpenFGA with MySQL as the datastore 2. Your authorization decisions rely on case-sensitive user strings.</p> <p>## Fix Upgrade to OpenFGA 1.18.0 or greater.</p> <p>## Acknowledgements OpenFGA would like to thank @sahajamoth for the detailed report.</p> https://cve.radiocsirt.org/vuln/ghsa-cf98-j28v-49v6