VendorsOpen Policy Agentopen_policy_agentany version
Vulnerabilities

Open Policy Agent (OPA) any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2022-36085
OPA Compiler: Bypass of WithUnsafeBuiltins using `with` keyword to mock functions
Published 2022-09-08 · Modified
9.8EPSS 0.016
CVE-2022-33082
An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Published 2022-06-30 · Modified
7.5EPSS 0.017
CVE-2024-8260
OPA SMB Force-Authentication
Published 2024-08-30 · Analyzed
7.3EPSS 0.003
CVE-2022-23628
Array literal misordering in github.com/open-policy-agent/opa
Published 2022-02-09 · Modified
6.3EPSS 0.010