GHSA-hr4f-6jh8-f2vqHighCVSS 7.5

OpenFGA DoS vulnerability

Published
October 18, 2023
Last Modified
November 12, 2023

🔗 CVE IDs covered (1)

CVE-2023-45810 →

📋 Description

Overview

OpenFGA is vulnerable to a DoS attack. When a number of ListObjects calls are executed, in some scenarios, those calls are not releasing resources even after a response has been sent, and the service as a whole becomes unresponsive.

Fix

Upgrade to v1.3.4. This upgrade is backwards compatible.

🎯 Affected products1

  • go/github.com/openfga/openfga:< 1.3.4

🔗 References (4)