https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 07:47:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-233473 EUVD-2026-233473 https://cve.radiocsirt.org/vuln/euvd-2026-233473 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39340 <p>OpenFGA is an authorization/permission engine. Prior to version 0.2.4, the `streamed-list-objects` endpoint was not validating the authorization header, resulting in disclosure of objects in the store. Users `openfga/openfga` versions 0.2.3 and prior who are exposing the OpenFGA service to the internet are vulnerable. Version 0.2.4 contains a patch for this issue.</p> <p>OpenFGA is an authorization/permission engine. Prior to version 0.2.4, the `streamed-list-objects` endpoint was not validating the authorization header, resulting in disclosure of objects in the store. Users `openfga/openfga` versions 0.2.3 and prior who are exposing the OpenFGA service to the internet are vulnerable. Version 0.2.4 contains a patch for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-39340 https://cve.radiocsirt.org/vuln/ghsa-95x7-mh78-7w2r <p><strong>Affected:</strong> Go: github.com/openfga/openfga</p> <p>### Overview During our internal security assessment, it was discovered that `streamed-list-objects` endpoint was not validating the authorization header resulting in the disclosure of objects in the store.</p> <p>### Am I Affected? You are affected by this vulnerability if you are using `openfga/openfga` version `v0.2.3` or prior and you are exposing the OpenFGA service to the internet.</p> <p>### How to fix that? Upgrade to version `v0.2.4`.</p> <p>### Backward Compatibility This update is backward compatible.</p> <p><strong>Affected:</strong> Go: github.com/openfga/openfga</p> <p>### Overview During our internal security assessment, it was discovered that `streamed-list-objects` endpoint was not validating the authorization header resulting in the disclosure of objects in the store.</p> <p>### Am I Affected? You are affected by this vulnerability if you are using `openfga/openfga` version `v0.2.3` or prior and you are exposing the OpenFGA service to the internet.</p> <p>### How to fix that? Upgrade to version `v0.2.4`.</p> <p>### Backward Compatibility This update is backward compatible.</p> https://cve.radiocsirt.org/vuln/ghsa-95x7-mh78-7w2r https://cve.radiocsirt.org/vuln/gsd-2022-39340 gsd-2022-39340 https://cve.radiocsirt.org/vuln/gsd-2022-39340