Affected by GO-2024-2729
and 10 other vulnerabilities
GO-2024-2729: OpenFGA Authorization Bypass in github.com/openfga/openfga
GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga
GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga
GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga
GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga
GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga
GO-2026-5136: OpenFGA has Improper Policy Enforcement in github.com/openfga/openfga
GO-2026-5170: OpenFGA: Unauthenticated playground endpoint discloses preshared API key in HTML response in github.com/openfga/openfga
GO-2026-5239: OpenFGA has cache-key delimiter injection in shared-iterator and v2 iterator that caches enables intra-store authorization-decision poisoning in github.com/openfga/openfga
GO-2026-5322: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga
GO-2026-5423: OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset in github.com/openfga/openfga
LinearBuckets returns an evenly distributed range of buckets in the closed interval
[min...max]. The min and max count toward the bucket count since they are included
in the range.
Affected by 
Documentation
¶
Source Files