All 4 CVE vulnerabilities found in opa, with AI-generated Chinese analysis, references, and POCs.
Vendor: open-policy-agent
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-46569 | OPA server Data API HTTP path injection of Rego CWE-863 | 5.4AI | MediumAI | 2025-05-01 |
| CVE-2024-8260 | OPA SMB Force-Authentication CWE-294 | 6.1 | Medium | 2024-08-30 |
| CVE-2022-36085 | OPA Compiler: Bypass of WithUnsafeBuiltins using `with` keyword to mock functions CWE-693 | 7.4 | High | 2022-09-08 |
| CVE-2022-23628 | Array literal misordering in github.com/open-policy-agent/opa CWE-682 | 6.3 | Medium | 2022-02-09 |
All 4 known CVE vulnerabilities affecting opa with full Chinese analysis, references, and POCs where available.