Go/github.com/open-policy-agent/opa CVE-2022-36085: unknown, EPSS 1.63%

Protection bypass in github.com/open-policy-agent/opa

Action: Upgrade github.com/open-policy-agent/opa to 0.44.0 or later.

go get github.com/open-policy-agent/opa@v0.44.0

Affected

Fixed versions

Sources

• osv: GO-2022-0978
• https://github.com/open-policy-agent/opa/security/advisories/GHSA-f524-rf33-2jjr
• https://github.com/open-policy-agent/opa/pull/4540
• https://github.com/open-policy-agent/opa/pull/4616
• https://github.com/open-policy-agent/opa/commit/25a597bc3f4985162e7f65f9c36599f4f8f55823
• https://github.com/open-policy-agent/opa/commit/3e8c754ed007b22393cf65e48751ad9f6457fee8
• https://github.com/open-policy-agent/opa/releases/tag/v0.43.1

CVE-2022-36085 · published 2022-09-13T17:40:16Z · modified 2024-05-20T16:03:47Z · JSON