Products: 2
Vulnerabilities: 27
Known Exploited: 0
5
Critical Level Threats
6
High Level Threats
15
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-61709
OpenFGA: ListUsers returns a deliberately-excluded user (authorization-decision over-inclusion) when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user
Last Modified: Sep 18, 2026
Published: Sep 16, 2026
CVE-2026-55689
OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset
Last Modified: Jul 10, 2026
Published: Jul 09, 2026
CVE-2026-55170
OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions
Last Modified: Jul 10, 2026
Published: Jul 09, 2026
CVE-2026-48096
OpenFGA: Cache-key delimiter injection in openfga/openfga shared-iterator and v2 iterator caches enables intra-store authorization-decision poisoning
Last Modified: Jun 12, 2026
Published: Jun 10, 2026
CVE-2026-41131
OpenFGA has Improper Policy Enforcement
Last Modified: Apr 24, 2026
Published: Apr 21, 2026
Items Per Page
