Affected by GO-2026-5239
and 2 other vulnerabilities
GO-2026-5239: OpenFGA has cache-key delimiter injection in shared-iterator and v2 iterator that caches enables intra-store authorization-decision poisoning in github.com/openfga/openfga
GO-2026-5322: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga
GO-2026-5423: OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset in github.com/openfga/openfga
type Assertion struct {
Request *openfgav1.ListObjectsRequest ContextualTuples []*openfgav1.TupleKey `json:"contextualTuples"`
Context *structpb.Struct Expectation []string ErrorCode int `json:"errorCode"` // If ErrorCode is non-zero then we expect that the ListObjects call failed.}