Skip to content
Heist/ feed
Back to feed
UnratedFix available

v1.19.0

Type: patchSources: OpenFGA

OpenFGA v1.19.0 fixes a security issue where StreamedListObjects could return results that should have been excluded during an error.

Products
openfga
Affected versions
Not specified
Fixed versions
v1.19.0
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
29 Oct 2026, 13:31 UTC · Revision 1

Source evidence

v1.19.0

github-openfga-openfga · Original source

Published 8 Sept 2026, 21:12 UTC

OpenFGA v1.19.0 fixes a security issue where StreamedListObjects could return results that should have been excluded during an error.

Security Fixed GHSA-5278-rrxc-mgf7, where StreamedListObjects could return a result that should have been excluded during an error.

openfga

Fixed versions: v1.19.0

Complete source record
{
  "id": "16dd249cc3a6e8fed049f105cb1306551168ebdea4f98fd7a25bf43d7794baaf",
  "url": "https://github.com/openfga/openfga/releases/tag/v1.19.0",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "v1.19.0",
    "summary": "OpenFGA v1.19.0 fixes a security issue where StreamedListObjects could return results that should have been excluded during an error.",
    "evidence": "Security Fixed GHSA-5278-rrxc-mgf7, where StreamedListObjects could return a result that should have been excluded during an error.",
    "products": [
      {
        "name": {
          "value": "openfga",
          "evidence": "Release notes from openfga"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "v1.19.0",
            "evidence": "v1.19.0"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-openfga-openfga",
  "document_id": 22023,
  "published_at": "2026-09-08T21:12:49+00:00"
}