Open-Policy-Agent Opa
3 CVEs affecting Open-Policy-Agent Opa. Latest disclosed: 2025-05-01. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-36085 | High | 7.4 | 2022-09-08 | Open Policy Agent (OPA) is an open source, general-purpose policy engine. The Rego compiler provides a (deprecated) `WithUnsafeBuiltins` function, which allows… |
CVE-2022-23628 | Medium | 6.3 | 2022-02-09 | OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree (AST) that contains synthetic nodes cou… |
CVE-2025-46569 | | 2025-05-01 | Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP Data API for readin… |