diff --git a/data/osv/GO-2025-3384.json b/data/osv/GO-2025-3384.json new file mode 100644 index 00000000..e9dcba79 --- /dev/null +++ b/data/osv/GO-2025-3384.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.3.1", + "id": "GO-2025-3384", + "modified": "0001-01-01T00:00:00Z", + "published": "0001-01-01T00:00:00Z", + "aliases": [ + "CVE-2024-56323", + "GHSA-32q6-rr98-cjqv" + ], + "summary": "OpenFGA Authorization Bypass in github.com/openfga/openfga", + "details": "OpenFGA Authorization Bypass in github.com/openfga/openfga", + "affected": [ + { + "package": { + "name": "github.com/openfga/openfga", + "ecosystem": "Go" + }, + "ranges": [ + { + "type": "SEMVER", + "events": [ + { + "introduced": "1.3.8" + }, + { + "fixed": "1.8.3" + } + ] + } + ], + "ecosystem_specific": {} + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://github.com/openfga/openfga/security/advisories/GHSA-32q6-rr98-cjqv" + } + ], + "database_specific": { + "url": "https://pkg.go.dev/vuln/GO-2025-3384", + "review_status": "UNREVIEWED" + } +} \ No newline at end of file diff --git a/data/reports/GO-2025-3384.yaml b/data/reports/GO-2025-3384.yaml new file mode 100644 index 00000000..42d70cb1 --- /dev/null +++ b/data/reports/GO-2025-3384.yaml @@ -0,0 +1,18 @@ +id: GO-2025-3384 +modules: + - module: github.com/openfga/openfga + versions: + - introduced: 1.3.8 + - fixed: 1.8.3 + vulnerable_at: 1.8.2 +summary: OpenFGA Authorization Bypass in github.com/openfga/openfga +cves: + - CVE-2024-56323 +ghsas: + - GHSA-32q6-rr98-cjqv +references: + - advisory: https://github.com/openfga/openfga/security/advisories/GHSA-32q6-rr98-cjqv +source: + id: GHSA-32q6-rr98-cjqv + created: 2025-01-14T14:56:58.926069347Z +review_status: UNREVIEWED