All products

github.com/open-policy-agent/opa

Go · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
OPA server Data API HTTP path injection of RegoCVE-2025-46569 · GHSA-6M8W-JC87-6CR7Version ranges need review. github.com/open-policy-agent/opa/servergithub.com/open-policy-agent/opa/v1/server GoRed Hat High Fix reported
OPA for Windows has an SMB force-authentication vulnerabilityCVE-2024-8260 · GHSA-C77R-FH37-X2PXVersion ranges need review. github.com/open-policy-agent/opaRed Hat Connectivity Link 1/authorino-container GoRed Hat Medium Fix reported
Denial of service in Open Policy Agent CVE-2022-33082 · GHSA-2M4X-4Q9J-W97GVersion ranges need review. github.com/open-policy-agent/opaRed Hat Advanced Cluster Security 3/advanced-cluster-security/rhacs-main-rhel8 GoRed Hat High Fix reported
Out of bounds memory access in github.com/open-policy-agent/opaCVE-2022-28946 · GHSA-X7F3-62PM-9P38Version ranges need review. github.com/open-policy-agent/opa Go High Fix reported
Incorrect Calculation in github.com/open-policy-agent/opaCVE-2022-23628 · GHSA-HCW3-J74M-QC58Version ranges need review. github.com/open-policy-agent/opa Go Medium Fix reported
OPA Compiler: Bypass of WithUnsafeBuiltins using "with" keyword to mock functionsCVE-2022-36085 · GHSA-F524-RF33-2JJRVersion ranges need review. github.com/open-policy-agent/opa Go High Fix reported