Go/github.com/openfga/openfga CVE-2026-33729: unknown, EPSS 0.31%
OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga
Action: Upgrade github.com/openfga/openfga to 1.13.1 or later.
go get github.com/openfga/openfga@v1.13.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.13.1 | - |
Fixed versions
| 1.13.1 |
Sources
- osv: GO-2026-4857
- https://github.com/openfga/openfga/security/advisories/GHSA-h6c8-cww8-35hf
- https://github.com/openfga/openfga/commit/049b50ccd2cc7e163bd897f3d17a7b859ad146f8
- https://github.com/openfga/openfga/releases/tag/v1.13.1
CVE-2026-33729 · published · modified · JSON