Go/github.com/openfga/openfga CVE-2025-55213: medium, EPSS 0.32%
OpenFGA Authorization Bypass
Action: Upgrade github.com/openfga/openfga to 1.9.5 or later.
go get github.com/openfga/openfga@v1.9.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.9.3 | 1.9.5 | - |
Fixed versions
| 1.9.5 |
Sources
- osv: GHSA-mgh9-4mwp-fg55
- https://github.com/openfga/openfga/security/advisories/GHSA-mgh9-4mwp-fg55
- https://nvd.nist.gov/vuln/detail/CVE-2025-55213
- https://github.com/openfga/openfga/commit/1a7e0e37fc4777c824b2386cac4867a66f3480b0
- https://github.com/openfga/openfga
- https://pkg.go.dev/vuln/GO-2025-3894
CVE-2025-55213 · published · modified · JSON