Skip to content
OpenAdvisories

Package · Go

github.com/open-policy-agent/opa-envoy-plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-26205

    opa-envoy-plugin has an Authorization Bypass via Double-Slash Path Misinterpretation in `input.parsed_path`

    opa-envoy-plugun is a plugin to enforce OPA policies with Envoy. Versions prior to 1.13.2-envoy-2 have a vulnerability in how the `input.parsed_path` field is constructed. HTTP request paths are treated as full URIs when parsed; interpreting leading path segm…

    open-policy-agent opa-envoy-plugin github.com/open-policy-agent/opa-envoy-plugin Go