PyPI/fastapi-opa CVE-2024-40627: medium 5.8, EPSS 0.56%

OpaMiddleware does not filter HTTP OPTIONS requests

Action: Upgrade fastapi-opa to 2.0.1 or later.

pip install fastapi-opa==2.0.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1361
• https://github.com/busykoala/fastapi-opa/security/advisories/GHSA-5f5c-8rvc-j8wf
• https://nvd.nist.gov/vuln/detail/CVE-2024-40627
• https://github.com/busykoala/fastapi-opa/commit/9458845a6f6f414c0b79587fae83d7f14d74dfb4
• https://github.com/busykoala/fastapi-opa/commit/9588109ff651f7ffc92687129c4956126443fb8c
• https://github.com/busykoala/fastapi-opa
• https://github.com/busykoala/fastapi-opa/blob/6dd6f8c87e908fe080784a74707f016f1422b58a/fastapi_opa/opa/opa_middleware.py#L79-L80
• https://pypi.org/project/fastapi-opa
• https://github.com/advisories/GHSA-5f5c-8rvc-j8wf

CVE-2024-40627 · published 2026-07-07T14:34:36.861319Z · modified 2026-07-07T17:47:35.983543869Z · JSON