Go/github.com/openfga/openfga CVE-2025-55213: critical 9.8, EPSS 0.32%
OpenFGA Authorization Bypass in github.com/openfga/openfga
Action: Upgrade github.com/openfga/openfga to 1.9.5 or later.
go get github.com/openfga/openfga@v1.9.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.9.3 | 1.9.5 | - |
Fixed versions
| 1.9.5 |
Sources
- osv: GO-2025-3894
- nvd: CVE-2025-55213
- https://github.com/openfga/openfga/security/advisories/GHSA-mgh9-4mwp-fg55
- https://github.com/openfga/openfga/commit/1a7e0e37fc4777c824b2386cac4867a66f3480b0
CVE-2025-55213 · published · modified · JSON