Skip to content
OpenAdvisories

Vendor

open-policy-agent

4 known vulnerabilities.

Products

opa 3 opa-envoy-plugin 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2022-23628

    Array literal misordering in github.com/open-policy-agent/opa

    OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree (AST) that contains synthetic nodes could change the logic of some statements by reordering array literals. Example of policies impacted ar…

    open-policy-agent opa github.com/open-policy-agent/opa Go