openpolicyagent records
6 published records for vendor openpolicyagent.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 83.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-294 Authentication Bypass by Capture-replay1
- CWE-670 Always-Incorrect Control Flow Implementation1
- CWE-682 Incorrect Calculation1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2022-36085No exploit | OPA Compiler: Bypass of WithUnsafeBuiltins using `with` keyword to mock functionsopenpolicyagent · open policy agent · CWE-20 | Critical9.8 | — | 1.5% | Sep 8, 2022 |
31Monitor | CVE-2022-33082Proof of concept | An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (DoS) via a crafted iopenpolicyagent · open policy agent | High7.5 | — | 1.7% | Jun 30, 2022 |
30Monitor | CVE-2022-28946No exploit | An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causiopenpolicyagent · open policy agent | High7.5 | — | 1.0% | May 19, 2022 |
29Monitor | CVE-2024-8260No exploit | OPA SMB Force-Authenticationopenpolicyagent · open policy agent · CWE-294 | High7.3 | — | 0.3% | Aug 30, 2024 |
21Monitor | CVE-2021-43979No exploit | Styra Open Policy Agent (OPA) Gatekeeper through 3.7.0 mishandles concurrency, sometimes resulting in incorrect access control.openpolicyagent · gatekeeper · CWE-670 | Medium5.3 | — | 1.0% | Nov 17, 2021 |
21Monitor | CVE-2022-23628No exploit | Array literal misordering in github.com/open-policy-agent/opaopenpolicyagent · open policy agent · CWE-682 | Medium5.3 | — | 1.0% | Feb 9, 2022 |
- CVE-2022-3608539Monitor
OPA Compiler: Bypass of WithUnsafeBuiltins using `with` keyword to mock functions
CriticalCVSS 9.8No exploitEPSS 1%openpolicyagent · open policy agentSep 8, 2022
- CVE-2022-3308231Monitor
An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (DoS) via a crafted i
HighCVSS 7.5Proof of conceptEPSS 1%openpolicyagent · open policy agentJun 30, 2022
- CVE-2022-2894630Monitor
An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causi
HighCVSS 7.5No exploitEPSS 1%openpolicyagent · open policy agentMay 19, 2022
- CVE-2024-826029Monitor
OPA SMB Force-Authentication
HighCVSS 7.3No exploitEPSS 0%openpolicyagent · open policy agentAug 30, 2024
- CVE-2021-4397921Monitor
Styra Open Policy Agent (OPA) Gatekeeper through 3.7.0 mishandles concurrency, sometimes resulting in incorrect access control.
MediumCVSS 5.3No exploitEPSS 1%openpolicyagent · gatekeeperNov 17, 2021
- CVE-2022-2362821Monitor
Array literal misordering in github.com/open-policy-agent/opa
MediumCVSS 5.3No exploitEPSS 1%openpolicyagent · open policy agentFeb 9, 2022