Go/github.com/open-policy-agent/opa CVE-2024-8260: medium 6.1, EPSS 0.34%
OPA for Windows has an SMB force-authentication vulnerability
Action: Upgrade github.com/open-policy-agent/opa to 0.68.0 or later.
go get github.com/open-policy-agent/opa@v0.68.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.68.0 | - |
Fixed versions
| 0.68.0 |
Sources
- osv: GHSA-c77r-fh37-x2px
- https://nvd.nist.gov/vuln/detail/CVE-2024-8260
- https://github.com/open-policy-agent/opa/commit/10f4d553e6bb6ae9c69611ecdd9a77dda857070e
- https://github.com/open-policy-agent/opa
- https://github.com/open-policy-agent/opa/releases/tag/v0.68.0
- https://pkg.go.dev/vuln/GO-2024-3141
- https://www.tenable.com/security/research/tra-2024-36
CVE-2024-8260 · published · modified · JSON