HIGH7.5Go
GHSA-2m4x-4q9j-w97g· CVE-2022-33082, GO-2022-0574Denial of service in Open Policy Agent
Modified: 9/10/2026
package
Go/github.com/open-policy-agent/opa
pkg:go/github.com/open-policy-agent/opa
HIGHGo
GHSA-6m8w-jc87-6cr7· CVE-2025-46569, GO-2025-3660OPA server Data API HTTP path injection of Rego
Modified: 9/10/2026
MEDIUM6.1Go
GHSA-c77r-fh37-x2px· CVE-2024-8260, GO-2024-3141OPA for Windows has an SMB force-authentication vulnerability
Modified: 9/10/2026
HIGH7.4Go
GHSA-f524-rf33-2jjr· CVE-2022-36085, GO-2022-0978OPA Compiler: Bypass of WithUnsafeBuiltins using "with" keyword to mock functions
Modified: 1/23/2024
MEDIUM6.3Go
GHSA-hcw3-j74m-qc58· CVE-2022-23628, GO-2022-0316Incorrect Calculation in github.com/open-policy-agent/opa
Modified: 5/20/2024
HIGH7.5Go
GHSA-x7f3-62pm-9p38· CVE-2022-28946, GO-2022-0587Out of bounds memory access in github.com/open-policy-agent/opa
Modified: 9/10/2026
—Go
GO-2022-0316· CVE-2022-23628, GHSA-hcw3-j74m-qc58Incorrect calculation in github.com/open-policy-agent/opa
Modified: 5/20/2024
—Go
GO-2022-0574· CVE-2022-33082, GHSA-2m4x-4q9j-w97gDenial of service in github.com/open-policy-agent/opa
Modified: 2/4/2026
—Go
GO-2022-0587· CVE-2022-28946, GHSA-x7f3-62pm-9p38Out of bounds memory access in github.com/open-policy-agent/opa
Modified: 2/4/2026
—Go
GO-2022-0978· CVE-2022-36085, GHSA-f524-rf33-2jjrProtection bypass in github.com/open-policy-agent/opa
Modified: 5/20/2024
—Go
GO-2024-3141· CVE-2024-8260, GHSA-c77r-fh37-x2pxOPA for Windows has an SMB force-authentication vulnerability in github.com/open-policy-agent/opa
Modified: 2/4/2026
—Go
GO-2025-3660· CVE-2025-46569, GHSA-6m8w-jc87-6cr7OPA server Data API HTTP path injection of Rego in github.com/open-policy-agent/opa
Modified: 2/4/2026