<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 29 Oct 2026 11:04:30 +0000</lastBuildDate>
    <item>
      <title>CLEANSTART-2026-ED95969 — Security fix for GHSA-jwvj-g8pc-cx45 applied in: grafana-fips 12.4.2-r0</title>
      <link>https://db.gcve.eu/vuln/cleanstart-2026-ed95969</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; CleanStart: grafana-fips&lt;/p&gt;
&lt;p&gt;Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; CleanStart: grafana-fips&lt;/p&gt;
&lt;p&gt;Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cleanstart-2026-ed95969</guid>
    </item>
    <item>
      <title>CVE-2026-34972 — OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key c…</title>
      <link>https://db.gcve.eu/vuln/cve-2026-34972</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openfga&lt;/p&gt;
&lt;p&gt;OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. From 1.8.0 to 1.13.1, under specific conditions, BatchCheck calls with multiple checks sent for the same object, relation, and user combination can result in improper policy enforcement. This vulnerability is fixed in 1.14.0.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openfga&lt;/p&gt;
&lt;p&gt;OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. From 1.8.0 to 1.13.1, under specific conditions, BatchCheck calls with multiple checks sent for the same object, relation, and user combination can result in improper policy enforcement. This vulnerability is fixed in 1.14.0.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-34972</guid>
    </item>
  </channel>
</rss>
