github.com/open-policy-agent/opa/server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.4

CVE-2025-46569

OPA server Data API HTTP path injection of Rego

Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP Data API for reading and writing documents. Requesting a virtual document through the Data API entails policy evaluatio…

open-policy-agent opa github.com/open-policy-agent/opa github.com/open-policy-agent/opa/v1/server Go

May 1, 2025