{"id":"GO-2025-4150","revision":"ac5f175e67ec4bf693a666ec2bf637f8","records":[{"revision":"ac5f175e67ec4bf693a666ec2bf637f8","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4150","aliases":["CVE-2025-64751","GHSA-2c64-vmv2-hgfc"],"title":"OpenFGA Improper Policy Enforcement in github.com/openfga/openfga","description":"OpenFGA Improper Policy Enforcement in github.com/openfga/openfga","state":0,"publishedAt":"2025-11-25T18:12:18+00:00","modifiedAt":"2026-02-04T02:31:25.586564+00:00","affected":[{"ecosystem":"Go","name":"github.com/openfga/openfga","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.4.0"},{"kind":"fixed","version":"1.11.1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/openfga/openfga/security/advisories/GHSA-2c64-vmv2-hgfc","https://nvd.nist.gov/vuln/detail/CVE-2025-64751","https://github.com/openfga/openfga/releases/tag/v1.11.1"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4150","license":"OSV · upstream source license applies","key":"osv:GO-2025-4150","identifiers":["GO-2025-4150","CVE-2025-64751","GHSA-2c64-vmv2-hgfc"]},"retained":false,"historicalAffected":[]}],"coverage":[]}