Go/github.com/openfga/openfga CVE-2025-64751: high 8.8, EPSS 0.31%

OpenFGA Improper Policy Enforcement

Action: Upgrade github.com/openfga/openfga to 1.11.1 or later.

go get github.com/openfga/openfga@v1.11.1

Affected

Fixed versions

Sources

• osv: GHSA-2c64-vmv2-hgfc
• nvd: CVE-2025-64751
• https://github.com/openfga/openfga/security/advisories/GHSA-2c64-vmv2-hgfc
• https://github.com/openfga/openfga
• https://github.com/openfga/openfga/releases/tag/v1.11.1

CVE-2025-64751 · published 2025-11-20T22:48:55Z · modified 2026-09-10T03:50:30.373070149Z · JSON