CVE-2025-48371

Medium

Advisory

Published 23 May 2025In the index since 8 Sept 2026

OpenFGA Authorization Bypass

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
github.com/openfga/openfgagolang	v1.8.6, v1.8.12	1.8.13	2

2 by stars

Chart

Latest

Affected images

Radar Score

routergroundcover

1 of the 7 container images this version deploys carry CVE-2025-48371.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	github.com/openfga/openfga@v1.8.12	1.8.13

6,009

1 of the 2 container images this version deploys carry CVE-2025-48371.

Container image	Digest	Package	Fixed in
grafana/grafana :11.6.0	62d2b9d20a19	github.com/openfga/openfga@v1.8.6	1.8.13

1,667

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
grafana/grafana :11.6.0	62d2b9d20a19	github.com/openfga/openfga@v1.8.6	1.8.13	1
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	github.com/openfga/openfga@v1.8.12	1.8.13	1