Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-28946
7.5
HIGHCVSS v3
Published
May 19, 2022
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service (DoS) via triggering out-of-range memory access.
open-policy-agent/opa
GitHubOpen Policy Agent (OPA) is an open source, general-purpose policy engine.
GitHubOpen Policy Agent (OPA) is an open source, general-purpose policy engine.NVD