-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/openfga/openfga | go | >= 1.3.8, < 1.8.3 | 1.8.3 |
Miggo AIRoot Cause AnalysisThe vulnerability manifests in Check/ListObjects API handlers when three conditions converge: 1) conditional models, 2) caching enabled, and 3) contextual tuples with conditions. The core issue lies in cache key generation not accounting for conditional contextual tuples. The Server.Check and Server.ListObjects methods are the entry points for these API operations and would be responsible for cache key construction. The high confidence comes from the vulnerability's direct association with these endpoints' caching implementations and the documented fix version indicating core handler modifications.
GoGoOngoing coverage of React2Shell