https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 29 Oct 2026 09:28:56 +0000 https://db.gcve.eu/vuln/ghsa-jwvj-g8pc-cx45 <p><strong>Affected:</strong> Go: github.com/openfga/openfga</p> <p>### Description</p> <p>In OpenFGA, under specific conditions, BatchCheck calls with multiple checks sent for the same object, relation, and user combination can result in improper policy enforcement.</p> <p>### Am I affected?</p> <p>You are affected if you meet the following preconditions: 1. You execute **BatchCheck** operations which rely on context. 2. Multiple checks are sent within a single BatchCheck operation for the same user/object/relation combination, each containing context. 3. The contexts between those checks differ in a specific way</p> <p>### Fix Upgrade to OpenFGA v1.14.0</p> <p>### Acknowledgement OpenFGA would like to thank @bugbunny-research for the discovery and detailed report.</p> <p><strong>Affected:</strong> Go: github.com/openfga/openfga</p> <p>### Description</p> <p>In OpenFGA, under specific conditions, BatchCheck calls with multiple checks sent for the same object, relation, and user combination can result in improper policy enforcement.</p> <p>### Am I affected?</p> <p>You are affected if you meet the following preconditions: 1. You execute **BatchCheck** operations which rely on context. 2. Multiple checks are sent within a single BatchCheck operation for the same user/object/relation combination, each containing context. 3. The contexts between those checks differ in a specific way</p> <p>### Fix Upgrade to OpenFGA v1.14.0</p> <p>### Acknowledgement OpenFGA would like to thank @bugbunny-research for the discovery and detailed report.</p> https://db.gcve.eu/vuln/ghsa-jwvj-g8pc-cx45