openfga kayıtları
openfga üreticisine ait 26 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-285 Improper Authorization8
- CWE-863 Incorrect Authorization6
- CWE-284 Improper Access Control2
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')2
- CWE-178 Improper Handling of Case Sensitivity1
- CWE-400 Uncontrolled Resource Consumption1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
26 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-39342İstismar yok | OpenFGA Authorization Bypassopenfga · openfga · CWE-285 | Kritik9,8 | — | %0,9 | 25 Eki 2022 |
39İzleyin | CVE-2022-39341İstismar yok | OpenFGA Authorization Bypassopenfga · openfga · CWE-285 | Kritik9,8 | — | %0,9 | 25 Eki 2022 |
39İzleyin | CVE-2022-23542İstismar yok | OpenFGA Authorization Bypassopenfga · openfga · CWE-285 | Kritik9,8 | — | %0,9 | 20 Ara 2022 |
39İzleyin | CVE-2024-31452İstismar yok | OpenFGA Authorization Bypassopenfga · openfga · CWE-863 | Kritik9,8 | — | %0,7 | 16 Nis 2024 |
39İzleyin | CVE-2024-42473İstismar yok | OpenFGA Authorization Bypassopenfga · openfga · CWE-863 | Kritik9,8 | — | %0,5 | 12 Ağu 2024 |
39İzleyin | CVE-2022-39352İstismar yok | OpenFGA Authorization Bypassopenfga · openfga · CWE-863 | Kritik9,8 | — | %0,4 | 8 Kas 2022 |
35İzleyin | CVE-2026-34972İstismar yok | OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collisionopenfga · helm charts · CWE-863 | Yüksek8,8 | — | %0,3 | 6 Nis 2026 |
32İzleyin | CVE-2026-55689İstismar yok | OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unsetopenfga · helm charts · CWE-287 | Yüksek8,1 | — | %0,4 | 9 Tem 2026 |
30İzleyin | CVE-2023-35933İstismar yok | OpenFGA denial of service die to circular relationshipopenfga · openfga · CWE-835 | Yüksek7,5 | — | %1,1 | 26 Haz 2023 |
30İzleyin | CVE-2023-45810İstismar yok | OpenFGA denial of serviceopenfga · openfga · CWE-400 | Yüksek7,5 | — | %0,5 | 17 Eki 2023 |
26İzleyin | CVE-2024-23820İstismar yok | OpenFGA, an authorization/permission engine, is vulnerable to a denial of service attack in versions prior to 1.4.3.openfga · openfga · CWE-770 | Orta6,5 | — | %0,7 | 26 Oca 2024 |
26İzleyin | CVE-2023-40579İstismar yok | OpenFGA Authorization Bypassopenfga · openfga · CWE-284 | Orta6,5 | — | %0,5 | 25 Ağu 2023 |
26İzleyin | CVE-2026-40293İstismar yok | OpenFGA Playground Preshared Key Exposureopenfga · openfga · CWE-200 | Orta6,5 | — | %0,5 | 17 Nis 2026 |
23İzleyin | CVE-2023-43645İstismar yok | Denial of service from circular relationship definitions in OpenFGAopenfga · openfga · CWE-835 | Orta5,9 | — | %0,9 | 27 Eyl 2023 |
23İzleyin | CVE-2025-48371İstismar yok | OpenFGA Authorization Bypassopenfga · helm charts · CWE-285 | Orta5,8 | — | %0,5 | 22 May 2025 |
23İzleyin | CVE-2024-56323İstismar yok | OpenFGA Authorization Bypassopenfga · helm charts · CWE-285 | Orta5,8 | — | %0,4 | 13 Oca 2025 |
23İzleyin | CVE-2025-25196İstismar yok | OpenFGA Authorization Bypassopenfga · helm charts · CWE-285 | Orta5,8 | — | %0,4 | 19 Şub 2025 |
23İzleyin | CVE-2025-46331İstismar yok | OpenFGA Authorization Bypassopenfga · helm charts · CWE-284 | Orta5,8 | — | %0,4 | 30 Nis 2025 |
23İzleyin | CVE-2026-24851İstismar yok | OpenFGA Improper Policy Enforcementopenfga · helm charts · CWE-863 | Orta5,8 | — | %0,3 | 6 Şub 2026 |
23İzleyin | CVE-2025-55213İstismar yok | OpenFGA Authorization Bypass (Check)openfga · helm charts · CWE-863 | Orta5,8 | — | %0,3 | 18 Ağu 2025 |
23İzleyin | CVE-2026-33729İstismar yok | OpenFGA has an Authorization Bypass through cached keysopenfga · openfga · CWE-20 | Orta5,8 | — | %0,3 | 26 Mar 2026 |
23İzleyin | CVE-2025-64751İstismar yok | OpenFGA Improper Policy Enforcementopenfga · helm charts · CWE-285 | Orta5,8 | — | %0,3 | 20 Kas 2025 |
21İzleyin | CVE-2022-39340İstismar yok | OpenFGA Information Disclosureopenfga · openfga · CWE-285 | Orta5,3 | — | %0,7 | 25 Eki 2022 |
21İzleyin | CVE-2026-48096İstismar yok | OpenFGA: Cache-key delimiter injection in openfga/openfga shared-iterator and v2 iterator caches enables intra-store authorization-decision poisoningopenfga · helm charts · CWE-345 | Orta5,3 | — | %0,1 | 10 Haz 2026 |
20İzleyin | CVE-2026-41131İstismar yok | OpenFGA has Improper Policy Enforcementopenfga · helm charts · CWE-706 | Orta5,0 | — | %0,2 | 21 Nis 2026 |
- CVE-2022-3934239İzleyin
OpenFGA Authorization Bypass
KritikCVSS 9,8İstismar yokEPSS %1openfga · openfga25 Eki 2022
- CVE-2022-3934139İzleyin
OpenFGA Authorization Bypass
KritikCVSS 9,8İstismar yokEPSS %1openfga · openfga25 Eki 2022
- CVE-2022-2354239İzleyin
OpenFGA Authorization Bypass
KritikCVSS 9,8İstismar yokEPSS %1openfga · openfga20 Ara 2022
- CVE-2024-3145239İzleyin
OpenFGA Authorization Bypass
KritikCVSS 9,8İstismar yokEPSS %1openfga · openfga16 Nis 2024
- CVE-2024-4247339İzleyin
OpenFGA Authorization Bypass
KritikCVSS 9,8İstismar yokEPSS %1openfga · openfga12 Ağu 2024
- CVE-2022-3935239İzleyin
OpenFGA Authorization Bypass
KritikCVSS 9,8İstismar yokEPSS %0openfga · openfga8 Kas 2022
- CVE-2026-3497235İzleyin
OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision
YüksekCVSS 8,8İstismar yokEPSS %0openfga · helm charts6 Nis 2026
- CVE-2026-5568932İzleyin
OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset
YüksekCVSS 8,1İstismar yokEPSS %0openfga · helm charts9 Tem 2026
- CVE-2023-3593330İzleyin
OpenFGA denial of service die to circular relationship
YüksekCVSS 7,5İstismar yokEPSS %1openfga · openfga26 Haz 2023
- CVE-2023-4581030İzleyin
OpenFGA denial of service
YüksekCVSS 7,5İstismar yokEPSS %1openfga · openfga17 Eki 2023
- CVE-2024-2382026İzleyin
OpenFGA, an authorization/permission engine, is vulnerable to a denial of service attack in versions prior to 1.4.3.
OrtaCVSS 6,5İstismar yokEPSS %1openfga · openfga26 Oca 2024
- CVE-2023-4057926İzleyin
OpenFGA Authorization Bypass
OrtaCVSS 6,5İstismar yokEPSS %1openfga · openfga25 Ağu 2023
- CVE-2026-4029326İzleyin
OpenFGA Playground Preshared Key Exposure
OrtaCVSS 6,5İstismar yokEPSS %1openfga · openfga17 Nis 2026
- CVE-2023-4364523İzleyin
Denial of service from circular relationship definitions in OpenFGA
OrtaCVSS 5,9İstismar yokEPSS %1openfga · openfga27 Eyl 2023
- CVE-2025-4837123İzleyin
OpenFGA Authorization Bypass
OrtaCVSS 5,8İstismar yokEPSS %0openfga · helm charts22 May 2025
- CVE-2024-5632323İzleyin
OpenFGA Authorization Bypass
OrtaCVSS 5,8İstismar yokEPSS %0openfga · helm charts13 Oca 2025
- CVE-2025-2519623İzleyin
OpenFGA Authorization Bypass
OrtaCVSS 5,8İstismar yokEPSS %0openfga · helm charts19 Şub 2025
- CVE-2025-4633123İzleyin
OpenFGA Authorization Bypass
OrtaCVSS 5,8İstismar yokEPSS %0openfga · helm charts30 Nis 2025
- CVE-2026-2485123İzleyin
OpenFGA Improper Policy Enforcement
OrtaCVSS 5,8İstismar yokEPSS %0openfga · helm charts6 Şub 2026
- CVE-2025-5521323İzleyin
OpenFGA Authorization Bypass (Check)
OrtaCVSS 5,8İstismar yokEPSS %0openfga · helm charts18 Ağu 2025
- CVE-2026-3372923İzleyin
OpenFGA has an Authorization Bypass through cached keys
OrtaCVSS 5,8İstismar yokEPSS %0openfga · openfga26 Mar 2026
- CVE-2025-6475123İzleyin
OpenFGA Improper Policy Enforcement
OrtaCVSS 5,8İstismar yokEPSS %0openfga · helm charts20 Kas 2025
- CVE-2022-3934021İzleyin
OpenFGA Information Disclosure
OrtaCVSS 5,3İstismar yokEPSS %1openfga · openfga25 Eki 2022
- CVE-2026-4809621İzleyin
OpenFGA: Cache-key delimiter injection in openfga/openfga shared-iterator and v2 iterator caches enables intra-store authorization-decision poisoning
OrtaCVSS 5,3İstismar yokEPSS %0openfga · helm charts10 Haz 2026
- CVE-2026-4113120İzleyin
OpenFGA has Improper Policy Enforcement
OrtaCVSS 5,0İstismar yokEPSS %0openfga · helm charts21 Nis 2026