{"action":"Upgrade github.com/open-policy-agent/opa to 0.40.0 or later.","affected":[{"fixed":"0.40.0","introduced":"0"}],"component":"github.com/open-policy-agent/opa","cve_ids":["CVE-2022-28946"],"ecosystem":"Go","epss":0.0104,"exploited":false,"fixed_versions":["0.40.0"],"ghsa_id":"GHSA-x7f3-62pm-9p38","id":"tcs_01M5KFWA5J64XBTRQPCX1CK1QZ","modified_at":"2026-02-04T02:27:52.773117Z","published_at":"2022-05-20T00:00:26Z","references":["https://osv.dev/vulnerability/GO-2022-0587","https://github.com/open-policy-agent/opa/pull/4548","https://github.com/open-policy-agent/opa/commit/e9d3828db670cbe11129885f37f08cbf04935264"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0587","url":"https://osv.dev/vulnerability/GO-2022-0587"}],"summary":"Out of bounds memory access in github.com/open-policy-agent/opa"}