Skip to content
OpenAdvisories

Product · cedar-policy

cedar-java

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-55771

    CedarJava has policy injection, type confusion, and incorrect equality comparison vulnerabilities

    CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 4.9.0, the EntityIdentifier.equals() has inverted null/self branches which could lead to incorrect equality compa…

    cedar-policy cedar-java com.cedarpolicy:cedar-java Maven
  • High 8.8
    CVE-2026-55773

    CedarJava has a policy injection vulnerability

    CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 2.3.6, 3.4.1 and 4.9.0, under certain circumstances, improper input handling could allow Cedar-expression injecti…

    cedar-policy cedar-java com.cedarpolicy:cedar-java Maven
  • High 8.8
    CVE-2026-55772

    CedarJava has a type confusion vulnerability

    CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 2.3.6, 3.4.1 and 4.9.0, under certain circumstances, improper input handling could allow Record-to-Entity type co…

    cedar-policy cedar-java com.cedarpolicy:cedar-java Maven