HC
Product
Helm Charts
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 5Medium 3Low 0
Watch
Add Helm Charts to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-55213 | 9.8 | Aug 18 | OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar Affected: 0.2.40 before 0.2.42 |
| CVE-2025-46331 | 9.8 | Apr 30 | OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar Affected: 0.1.36 before 0.2.29 |
| CVE-2025-25196 | 9.8 | Feb 19 | OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar Affected: before 0.2.22 |
| CVE-2024-56323 | 9.8 | Jan 13 | OpenFGA is an authorization/permission engine Affected: 0.1.38 before 0.2.19 |
| CVE-2026-34972 | 8.8 | Apr 6 | OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision Affected: 0.2.16 before 0.2.62 |
| CVE-2026-24851 | 8.8 | Feb 6 | OpenFGA Improper Policy Enforcement Affected: 0.2.22 before 0.2.51 |
| CVE-2025-64751 | 8.8 | Nov 21 | OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar Affected: 0.1.34 before 0.2.49 |
| CVE-2025-48371 | 8.8 | May 22 | OpenFGA is an authorization/permission engine Affected: 0.2.16 before 0.2.32 |
| CVE-2026-55689 | 8.1 | Jul 9 | OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset Affected: before 0.3.9 |
| CVE-2026-55170 | 5.4 | Jul 9 | OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions Affected: before 0.3.9 |
| CVE-2026-48096 | 5.3 | Jun 10 | OpenFGA: Cache-key delimiter injection in openfga/openfga shared-iterator and v2 iterator caches enables intra-store authorization-decision poisoning Affected: before 0.3.5 |
| CVE-2026-41131 | 5.0 | Apr 21 | OpenFGA has Improper Policy Enforcement Affected: before 0.3.1 |
Showing 12