{"action":"Upgrade fastapi-opa to 2.0.1 or later.","affected":[{"fixed":"2.0.1","introduced":"0"}],"component":"fastapi-opa","cve_ids":["CVE-2024-40627"],"ecosystem":"PyPI","epss":0.00563,"exploited":false,"fixed_versions":["2.0.1"],"ghsa_id":"GHSA-5f5c-8rvc-j8wf","id":"tcs_01M5KGS4RKNPVFF47NPCR2MQDX","modified_at":"2026-07-07T17:47:35.983543869Z","published_at":"2026-07-07T14:34:36.861319Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1361","https://github.com/busykoala/fastapi-opa/security/advisories/GHSA-5f5c-8rvc-j8wf","https://nvd.nist.gov/vuln/detail/CVE-2024-40627","https://github.com/busykoala/fastapi-opa/commit/9458845a6f6f414c0b79587fae83d7f14d74dfb4","https://github.com/busykoala/fastapi-opa/commit/9588109ff651f7ffc92687129c4956126443fb8c","https://github.com/busykoala/fastapi-opa","https://github.com/busykoala/fastapi-opa/blob/6dd6f8c87e908fe080784a74707f016f1422b58a/fastapi_opa/opa/opa_middleware.py#L79-L80","https://pypi.org/project/fastapi-opa","https://github.com/advisories/GHSA-5f5c-8rvc-j8wf"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-1361","url":"https://osv.dev/vulnerability/PYSEC-2026-1361"}],"summary":"OpaMiddleware does not filter HTTP OPTIONS requests"}