openfga

openfga 1.22.0 · pkgs/by-name/op/openfga/package.nix

Health

Risk

risk 30 high

+30 3 open advisories

Version

1.22.0 no newer release known to repology

Channels

master 1.22.0 · nixos-unstable 1.22.0 · nixos-26.05 1.14.2 master is ahead of nixos-26.05

Hydra

succeeded 8d ago

Advisories

NIXPKGS-2026-2133 medium 6.8 EPSS 0.4% openfga: security issues < 1.18.0 · #540290

CVE-2026-55170, CVE-2026-55689

NIXPKGS-2026-2623 medium 5.3 EPSS 0.4% OpenFGA: ListUsers returns a deliberately-excluded user (authorization-decision over-inclusion) when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user · #564233

CVE-2026-61709

NIXPKGS-2026-1908 medium 5.0 EPSS 0.1% OpenFGA: Cache-key delimiter injection in openfga/openfga shared-iterator and v2 iterator caches enables intra-store authorization-decision poisoning · #530663

CVE-2026-48096

NIXPKGS-2026-1207 fixed in master needs backport to nixos-26.05

NIXPKGS-2026-1169 fixed in master needs backport to nixos-26.05

Packaging

not read yet: the next index sweep reads it

Maintainers

jlesquembre

Pull requests 0

None open.

Closed or merged in the synced window 4

openfga: 1.21.0 -> 1.22.0

#571085 by r-ryantm · merged 8d ago