| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/openfga/openfga | < 1.4.3 | 1.4.3 |
| openfga | < 1.4.3 | 1.4.3 |
OpenFGA is vulnerable to a DoS attack. In some scenarios that depend on the model and tuples used, a call to ListObjects may not release memory properly. So when a sufficiently high number of those calls are executed, the OpenFGA server can create an "out of memory" error and terminate.
Upgrade to v1.4.3. This upgrade is backwards compatible.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free