{"action":"Upgrade github.com/open-policy-agent/opa to 0.37.2 or later.","affected":[{"fixed":"0.37.2","introduced":"0.33.1"}],"component":"github.com/open-policy-agent/opa","cve_ids":["CVE-2022-23628"],"ecosystem":"Go","epss":0.01026,"exploited":false,"fixed_versions":["0.37.2"],"ghsa_id":"GHSA-hcw3-j74m-qc58","id":"tcs_01M5KFCCN8BJXK1SFXD6KVQ813","modified_at":"2024-05-20T20:41:41Z","published_at":"2022-02-09T22:17:37Z","references":["https://osv.dev/vulnerability/GHSA-hcw3-j74m-qc58","https://github.com/open-policy-agent/opa/security/advisories/GHSA-hcw3-j74m-qc58","https://nvd.nist.gov/vuln/detail/CVE-2022-23628","https://github.com/open-policy-agent/opa/pull/3851","https://github.com/open-policy-agent/opa/commit/2bd8edab9e10e2dc9cf76ae8335ced0c224f3055","https://github.com/open-policy-agent/opa/commit/932e4ffc37a590ace79e9b75ca4340288c220239","https://github.com/open-policy-agent/opa/commit/bfd984ddf93ef2c4963a08d4fdadae0bcf1a3717","https://github.com/open-policy-agent/opa","https://pkg.go.dev/vuln/GO-2022-0316"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-hcw3-j74m-qc58","url":"https://osv.dev/vulnerability/GHSA-hcw3-j74m-qc58"}],"summary":"Incorrect Calculation in github.com/open-policy-agent/opa"}