TI-2022-16508 CVE-2022-36085 · GHSA-f524-rf33-2jjr
OPA Compiler: Bypass of WithUnsafeBuiltins using `with` keyword to mock functions
Priority HIGH 76
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
open-policy-agent
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
open-policy-agent records in CISA KEVNo open-policy-agent vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Open Policy Agent · all components
TI-2022-07681 CVE-2022-23628 · GHSA-hcw3-j74m-qc58
Array literal misordering in github.com/open-policy-agent/opa
Priority MEDIUM 61
OPA is an open source, general-purpose policy engine.
TI-2022-14552 CVE-2022-33082 · GHSA-2m4x-4q9j-w97g
An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers…
Priority LOW 36
An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (DoS) via a crafted input.
TI-2022-11544 CVE-2022-28946 · GHSA-x7f3-62pm-9p38
An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the…
Priority LOW 35
An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service (DoS) via triggering out-of-range memory access.
TI-2024-07657 CVE-2024-8260 · GHSA-c77r-fh37-x2px
OPA SMB Force-Authentication
Priority LOW 32
A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0.