Out of bounds memory access in github.com/open-policy-agent/opa

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-28946 · ADVISORY
• open-policy-agent/opa#4548 · WEB
• open-policy-agent/opa commit e9d3828 · WEB
• open-policy-agent/opa · PACKAGE
• pkg.go.dev/vuln/GO-2022-0587 · WEB

Altre vulnerabilità di github.com/open-policy-agent/opa

• CVE-2025-46569ALTO 7.4Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP …
• CVE-2024-8260ALTO 7.3A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of imp…
• CVE-2022-36085CRITICO 9.8Open Policy Agent (OPA) is an open source, general-purpose policy engine. The Rego compiler provides a (deprecated) `WithUnsafeBuiltins` fun…
• CVE-2022-33082ALTO 7.5An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (DoS) via a crafted i…
• CVE-2022-23628MEDIO 5.3OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree (AST) that contains …