Affected by GO-2025-4150
and 8 other vulnerabilities
GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga
GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga
GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga
GO-2026-5136: OpenFGA has Improper Policy Enforcement in github.com/openfga/openfga
GO-2026-5170: OpenFGA: Unauthenticated playground endpoint discloses preshared API key in HTML response in github.com/openfga/openfga
GO-2026-5239: OpenFGA has cache-key delimiter injection in shared-iterator and v2 iterator that caches enables intra-store authorization-decision poisoning in github.com/openfga/openfga
GO-2026-5322: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga
GO-2026-5423: OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset in github.com/openfga/openfga
GO-2026-5483: OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision in github.com/openfga/openfga
RunMigrations runs the migrations for the given config. This function is exposed to allow embedding openFGA
into applications and manage OpenFGA's database schema migrations directly. When OpenFGA is used as a library,
the embedding application may have its own migration system that differs from OpenFGA's use of goose.
By exposing this function, applications can:
1. Explicitly control when OpenFGA migrations run
2. Integrate OpenFGA's schema updates into their own migration workflows
3. Perform versioned upgrades of the schema as needed
The function handles migrations for multiple database engines (postgres, mysql, sqlite) and supports
both upgrading and downgrading to specific versions.
Affected by 
Documentation
¶
Source Files