{"action":"Upgrade github.com/openfga/openfga to 1.9.5 or later.","affected":[{"fixed":"1.9.5","introduced":"1.9.3"}],"component":"github.com/openfga/openfga","cve_ids":["CVE-2025-55213"],"ecosystem":"Go","epss":0.00324,"exploited":false,"fixed_versions":["1.9.5"],"ghsa_id":"GHSA-mgh9-4mwp-fg55","id":"tcs_01M5KFFVG43X4Y9PB9CXKA3YH2","modified_at":"2025-08-29T20:35:56Z","published_at":"2025-08-18T21:00:52Z","references":["https://osv.dev/vulnerability/GHSA-mgh9-4mwp-fg55","https://github.com/openfga/openfga/security/advisories/GHSA-mgh9-4mwp-fg55","https://nvd.nist.gov/vuln/detail/CVE-2025-55213","https://github.com/openfga/openfga/commit/1a7e0e37fc4777c824b2386cac4867a66f3480b0","https://github.com/openfga/openfga","https://pkg.go.dev/vuln/GO-2025-3894"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-mgh9-4mwp-fg55","url":"https://osv.dev/vulnerability/GHSA-mgh9-4mwp-fg55"}],"summary":"OpenFGA Authorization Bypass"}