Skip to content
OpenAdvisories

Package · Go

github.com/open-policy-agent/opa

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-8260

    OPA SMB Force-Authentication

    A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI…

    Styra OPA github.com/open-policy-agent/opa Go
  • Medium 6.3
    CVE-2022-23628

    Array literal misordering in github.com/open-policy-agent/opa

    OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree (AST) that contains synthetic nodes could change the logic of some statements by reordering array literals. Example of policies impacted ar…

    open-policy-agent opa github.com/open-policy-agent/opa Go