Threats tagged 'ghsa-224p-7467-99w9'

The auth0-ai-python Fine-Grained Authorization (FGA) retriever fails to differentiate authorization checks across different users, relations, or conditions when filtering documents during retrieval-augmented generation. This flaw causes documents that should be denied by Auth0 FGA policies to be included in the model's context and potentially used in generated responses.