{"action":"Upgrade github.com/open-policy-agent/opa to 0.40.0 or later.","affected":[{"fixed":"0.40.0","introduced":"0"}],"component":"github.com/open-policy-agent/opa","cve_ids":["CVE-2022-28946"],"ecosystem":"Go","epss":0.0104,"exploited":false,"fixed_versions":["0.40.0"],"ghsa_id":"GHSA-x7f3-62pm-9p38","id":"tcs_01M5KFRSE40F12XCBZ2QV18VR1","modified_at":"2026-09-10T03:49:43.555675003Z","published_at":"2022-05-20T00:00:26Z","references":["https://osv.dev/vulnerability/GHSA-x7f3-62pm-9p38","https://nvd.nist.gov/vuln/detail/CVE-2022-28946","https://github.com/open-policy-agent/opa/pull/4548","https://github.com/open-policy-agent/opa/commit/e9d3828db670cbe11129885f37f08cbf04935264","https://github.com/open-policy-agent/opa","https://pkg.go.dev/vuln/GO-2022-0587"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-x7f3-62pm-9p38","url":"https://osv.dev/vulnerability/GHSA-x7f3-62pm-9p38"}],"summary":"Out of bounds memory access in github.com/open-policy-agent/opa"}